Skip to:

  1. Skip to Jira Navigation
  2. Skip to Side Navigation
  3. Skip to Main Content

Kyverno - disallow-priviledged-escalation

Description

Use in ONAP charts: https://git.onap.org/oom/tree/kubernetes/common/common/templates/_pod.tpl#n67

Allowed Pod manifest :

spec:
  ...
  template:
    ...
    spec:
      securityContext:
        allowPrivilegeEscalation: false
      ...
      initContainers:
        - name: ...
          ...
          securityContext:
            allowPrivilegeEscalation: false
      containers:
        - name: someContainer
          ...
          securityContext:
            allowPrivilegeEscalation: false

Activity

Show:
Unresolved

Details

Assignee

Reporter

Components

Fix versions

Priority

Parent

Created April 16, 2024 at 2:10 PM
Updated October 16, 2024 at 3:02 PM
Resolved April 16, 2024 at 2:10 PM