DevFW-CICD/ingress-nginx-helm
6
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Chart: Remove Pod Security Policy. (#11971)

Browse source
This commit is contained in:
Marco Ebert 2024-09-15 17:03:24 +02:00 • committed by GitHub
parent 61f56cb490
commit 027603927b
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
19 changed files with 1 additions and 438 deletions
Download patch file Download diff file Expand all files Collapse all files

2
docs/troubleshooting.md
View file

@ -443,7 +443,7 @@ $ capsh --decode=0000000000000400
```
## Create a test pod as root
(Note, this may be restricted by PodSecurityPolicy, PodSecurityAdmission/Standards, OPA Gatekeeper, etc. in which case you will need to do the appropriate workaround for testing, e.g. deploy in a new namespace without the restrictions.)
(Note, this may be restricted by PodSecurityAdmission/Standards, OPA Gatekeeper, etc. in which case you will need to do the appropriate workaround for testing, e.g. deploy in a new namespace without the restrictions.)
To test further you may want to install additional utilities, etc. Modify the pod yaml by:
* changing runAsUser from 101 to 0
* removing the "drop..ALL" section from the capabilities.