chore(kyverno): Adding kyverno pod security policies for litmus pods (#504)

* chore(kyverno): Adding security policies

Signed-off-by: shubham chaudhary <shubham@chaosnative.com>

* chore(kyverno): updating policies

Signed-off-by: shubham chaudhary <shubham@chaosnative.com>

* chore(kyverno): updating policies

Signed-off-by: shubham chaudhary <shubham@chaosnative.com>

* chore(kyverno): changed the file names

Signed-off-by: shubham chaudhary <shubham@chaosnative.com>
This commit is contained in:
Shubham Chaudhary
2021-10-13 16:00:11 +05:30
committed by GitHub
parent aff27bc0ee
commit 14c472265f
8 changed files with 278 additions and 0 deletions

View File

@@ -0,0 +1,14 @@
resources:
- allow-capabilities-for-litmus-experiments-which-uses-runtime-api.yaml
- allow-host-namespaces-for-litmus-experiments-which-uses-runtime-api.yaml
- allow-privileged-containers-for-litmus-experiments-which-uses-runtime-api.yaml
- allow-privilege-escalation-for-litmus-experiments-which-uses-runtime-api.yaml
- allow-host-paths-for-litmus-experiments-which-uses-hostPaths.yaml
- allow-user-groups-for-litmus-experiments.yaml
patches:
- patch: |-
- op: replace
path: /spec/validationFailureAction
value: enforce
target:
kind: Policy