From 259655797b66f22a5729d496844967e3a94d1a0c Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Serta=C3=A7=20=C3=96zercan?=
<852750+sozercan@users.noreply.github.com>
Date: Thu, 2 Jul 2020 11:07:24 -0700
Subject: [PATCH] Remove container level supplementalGroups and fsgroup
---
content/en/docs/concepts/security/pod-security-standards.md | 4 ----
1 file changed, 4 deletions(-)
diff --git a/content/en/docs/concepts/security/pod-security-standards.md b/content/en/docs/concepts/security/pod-security-standards.md
index 2afd6c7335..20574c8f91 100644
--- a/content/en/docs/concepts/security/pod-security-standards.md
+++ b/content/en/docs/concepts/security/pod-security-standards.md
@@ -236,11 +236,7 @@ well as lower-trust users.The following listed controls should be enforced/disal
spec.securityContext.supplementalGroups[*]
spec.securityContext.fsGroup
spec.containers[*].securityContext.runAsGroup
- spec.containers[*].securityContext.supplementalGroups[*]
- spec.containers[*].securityContext.fsGroup
spec.initContainers[*].securityContext.runAsGroup
- spec.initContainers[*].securityContext.supplementalGroups[*]
- spec.initContainers[*].securityContext.fsGroup
Allowed Values:
non-zero
undefined / nil (except for `*.runAsGroup`)