Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

PodSecurity violation warning #241

Open
jdandrea opened this issue Apr 6, 2023 · 0 comments
Open

PodSecurity violation warning #241

jdandrea opened this issue Apr 6, 2023 · 0 comments
Labels
bug Something isn't working

Comments

@jdandrea
Copy link

jdandrea commented Apr 6, 2023

In which track did this bug occur?
Working with Kustomize

what is the url for the track?
https://developers.redhat.com/courses/gitops/working-kustomize

At what step of the track did this happen?
Exploring Kustomize

Describe the bug
Receiving a warning after kubectl apply -k ./ so it's not a showstopper. It would be an improved user experience—and perhaps recommended practice overall—to accommodate the new OpenShift Pod Security Standards, if that is what is at issue here.

https://connect.redhat.com/en/blog/important-openshift-changes-pod-security-standards

Logs or error messages

[root@crc-lgph7-master-0 kustomize-build]# kubectl apply -k ./
Warning: would violate PodSecurity "restricted:v1.24": allowPrivilegeEscalation != false
  (container "welcome-php" must set securityContext.allowPrivilegeEscalation=false),
  unrestricted capabilities (container "welcome-php" must set 
  securityContext.capabilities.drop=["ALL"]), runAsNonRoot != true (pod or container
  "welcome-php" must set securityContext.runAsNonRoot=true), seccompProfile (pod or
  container "welcome-php" must set securityContext.seccompProfile.type to
  "RuntimeDefault" or "Localhost")
deployment.apps/welcome-php created

Expected behavior
No warning if possible.

Screenshots
n/a

Desktop (please complete the following information):

  • macOS
  • Chrome 109.0.5414.119 (Official / arm64)
  • Ventura 13.2.1

Additional context
n/a

@jdandrea jdandrea added the bug Something isn't working label Apr 6, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

1 participant