Simplified CEL Expressions for Pod Security (CEL) Baseline policies #1127
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Signed-off-by: epasham <ekambaram.pasham@gmail.com>
Signed-off-by: epasham <ekambaram.pasham@gmail.com>
chipzoller
suggested changes
Aug 13, 2024
pod-security-cel/baseline/disallow-privileged-containers/disallow-privileged-containers.yaml
Outdated
Show resolved
Hide resolved
pod-security-cel/baseline/disallow-privileged-containers/artifacthub-pkg.yml
Outdated
Show resolved
Hide resolved
chipzoller
changed the title
chipzoller
reviewed
Aug 15, 2024
There was a problem hiding this comment.
@epasham, in the future, please use closing keywords to link your PR to issues it closes, and please complete the full PR template including check boxes.
chipzoller
previously approved these changes
Aug 15, 2024
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
Signed-off-by: epasham <ekambaram.pasham@gmail.com>
Signed-off-by: epasham <ekambaram.pasham@gmail.com>
Signed-off-by: epasham <ekambaram.pasham@gmail.com>
…low-privileged-containers.yaml Co-authored-by: Chip Zoller <chipzoller@gmail.com> Signed-off-by: Ekambaram Pasham <ekambaram.pasham@gmail.com>
Signed-off-by: epasham <ekambaram.pasham@gmail.com>
…ntainer types in a pod (#1111) * Update disallow-helm-tiller.yaml Signed-off-by: Dolis Sharma <71091713+dolisss@users.noreply.github.com> * Update artifacthub-pkg.yml Signed-off-by: Dolis Sharma <71091713+dolisss@users.noreply.github.com> * Update disallow-latest-tag.yaml Signed-off-by: Dolis Sharma <71091713+dolisss@users.noreply.github.com> * Update artifacthub-pkg.yml Signed-off-by: Dolis Sharma <71091713+dolisss@users.noreply.github.com> * Update bad-pod-latest-fail-first.yaml Signed-off-by: Dolis Sharma <71091713+dolisss@users.noreply.github.com> * Update bad-pod-latest-success-first.yaml Signed-off-by: Dolis Sharma <71091713+dolisss@users.noreply.github.com> * Update bad-pod-no-tag.yaml Signed-off-by: Dolis Sharma <71091713+dolisss@users.noreply.github.com> * Update good-pod.yaml Signed-off-by: Dolis Sharma <71091713+dolisss@users.noreply.github.com> * Update bad-deploy.yaml Signed-off-by: Dolis Sharma <71091713+dolisss@users.noreply.github.com> * Update bad-pod-fail-first.yaml Signed-off-by: Dolis Sharma <71091713+dolisss@users.noreply.github.com> * Update bad-pod.yaml Signed-off-by: Dolis Sharma <71091713+dolisss@users.noreply.github.com> * Update bad-pod-success-first.yaml Signed-off-by: Dolis Sharma <71091713+dolisss@users.noreply.github.com> * Update good-deploy.yaml Signed-off-by: Dolis Sharma <71091713+dolisss@users.noreply.github.com> * Update good-pod.yaml Signed-off-by: Dolis Sharma <71091713+dolisss@users.noreply.github.com> * Update disallow-latest-tag.yaml Signed-off-by: Dolis Sharma <71091713+dolisss@users.noreply.github.com> * Update disallow-helm-tiller.yaml Signed-off-by: Dolis Sharma <71091713+dolisss@users.noreply.github.com> * Update artifacthub-pkg.yml Signed-off-by: Dolis Sharma <71091713+dolisss@users.noreply.github.com> * Update artifacthub-pkg.yml Signed-off-by: Dolis Sharma <71091713+dolisss@users.noreply.github.com> * Update artifacthub-pkg.yml Signed-off-by: Dolis Sharma <71091713+dolisss@users.noreply.github.com> * Update artifacthub-pkg.yml Signed-off-by: Dolis Sharma <71091713+dolisss@users.noreply.github.com> * Update artifacthub-pkg.yml Signed-off-by: Dolis Sharma <71091713+dolisss@users.noreply.github.com> * Update artifacthub-pkg.yml Signed-off-by: Dolis Sharma <71091713+dolisss@users.noreply.github.com> * Update good-pod.yaml Signed-off-by: Dolis Sharma <71091713+dolisss@users.noreply.github.com> * Update bad-deploy.yaml Signed-off-by: Dolis Sharma <71091713+dolisss@users.noreply.github.com> * Update bad-pod-fail-first.yaml Signed-off-by: Dolis Sharma <71091713+dolisss@users.noreply.github.com> * Update bad-pod-success-first.yaml Signed-off-by: Dolis Sharma <71091713+dolisss@users.noreply.github.com> * Update bad-pod.yaml Signed-off-by: Dolis Sharma <71091713+dolisss@users.noreply.github.com> * Update good-deploy.yaml Signed-off-by: Dolis Sharma <71091713+dolisss@users.noreply.github.com> * Update resource.yaml Signed-off-by: Dolis Sharma <71091713+dolisss@users.noreply.github.com> * Update bad-pod-latest-fail-first.yaml Signed-off-by: Dolis Sharma <71091713+dolisss@users.noreply.github.com> * Update bad-pod-latest-success-first.yaml Signed-off-by: Dolis Sharma <71091713+dolisss@users.noreply.github.com> * Update bad-pod-no-tag.yaml Signed-off-by: Dolis Sharma <71091713+dolisss@users.noreply.github.com> * Update good-pod.yaml Signed-off-by: Dolis Sharma <71091713+dolisss@users.noreply.github.com> * Update resource.yaml Signed-off-by: Dolis Sharma <71091713+dolisss@users.noreply.github.com> --------- Signed-off-by: Dolis Sharma <71091713+dolisss@users.noreply.github.com>
|
am closing this pull request. I need to sign the commits using my infosys email id. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Related Issue(s)
Closes #1096
Closes #1097
Closes #1090
Description
There are redundant expressions in CEL expression to validate the containers, init containers and ephemeral containers in a pod definition.
What does this PR do?
Updated CEL expression using variable and optionals. Removed the redundant expressions
The validation expression is now simplified
Checklist