File tree Expand file tree Collapse file tree 2 files changed +4
-6
lines changed
pod-security-cel/baseline/disallow-host-ports Expand file tree Collapse file tree 2 files changed +4
-6
lines changed Original file line number Diff line number Diff line change @@ -20,4 +20,4 @@ annotations:
2020 kyverno/kubernetesVersion : " 1.26-1.27"
2121 kyverno/subject : " Pod"
2222digest : fb57038849aac629f54e22cfed02ca7ad2d1894d836f221b3cf3bb888a13a6ea
23- createdAt : " 2023-12-03T00 :22:34Z"
23+ createdAt : " 2025-05-2800 :22:34Z"
Original file line number Diff line number Diff line change @@ -35,12 +35,10 @@ spec:
3535 object.spec.?initContainers.orValue([]) +
3636 object.spec.?ephemeralContainers.orValue([])
3737 expressions :
38- - expression : >-
38+ - expression : >-
3939 variables.allContainers.all(container,
4040 container.?ports.orValue([]).all(port, port.?hostPort.orValue(0) == 0))
41- message: |-
41+ message: |-
4242 Use of host ports is disallowed. The field spec.containers[*].ports[*].hostPort,
4343 spec.initContainers[*].ports[*].hostPort, and spec.ephemeralContainers[*].ports[*].hostPort
44- must either be unset or set to `0`.
45-
46-
44+ must either be unset or set to `0`.
You can’t perform that action at this time.
0 commit comments