whentimeslows/website
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

PodSecurity: remove optional non-root group check

Browse Source
This commit is contained in:
Jordan Liggitt
2022-01-24 10:10:12 -05:00
parent 8917b26250
commit 4ca5ff6b3c
1 changed files with 0 additions and 20 deletions
Download Patch File Download Diff File Expand all files Collapse all files
content/en/docs/concepts/security/pod-security-standards.md
-20
View File
@@ -379,26 +379,6 @@ fail validation.
</ul> </ul>
</td> </td>
</tr> </tr>
<tr>
<td style="white-space: nowrap">Non-root groups <em>(optional)</em></td>
<td>
<p>Containers should be forbidden from running with a root primary or supplementary GID.</p>
<p><strong>Restricted Fields</strong></p>
<ul>
<li><code>spec.securityContext.runAsGroup</code></li>
<li><code>spec.securityContext.supplementalGroups[*]</code></li>
<li><code>spec.securityContext.fsGroup</code></li>
<li><code>spec.containers[*].securityContext.runAsGroup</code></li>
<li><code>spec.initContainers[*].securityContext.runAsGroup</code></li>
<li><code>spec.ephemeralContainers[*].securityContext.runAsGroup</code></li>
</ul>
<p><strong>Allowed Values</strong></p>
<ul>
<li>Undefined/nil (except for <code>*.runAsGroup</code>)</li>
<li>Non-zero</li>
</ul>
</td>
</tr>
<tr> <tr>
<td style="white-space: nowrap">Seccomp (v1.19+)</td> <td style="white-space: nowrap">Seccomp (v1.19+)</td>
<td> <td>