Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(k8spspallowprivilegeescalationcontainer): suite test confirming exemptImages #587

Conversation

julianKatz
Copy link
Contributor

I recently found (#584) that some K8sNativeValidation implementations of certain templates that iterate over and exempt containers by image had a bug preventing the exemption logic from working.

The k8spspallowprivilegeescalationcontainer turns out not to have this problem, as proved by the passing tests with the addition of an image exemption suite test.

… exemptImages

I recently found (open-policy-agent#584) that some K8sNativeValidation implementations of
certain templates that iterate over and exempt containers by image had
a bug preventing the exemption logic from working.

The k8spspallowprivilegeescalationcontainer turns out not to have this
problem, as proved by the passing tests with the addition of an image
exemption suite test.

Signed-off-by: juliankatz <[email protected]>
@julianKatz julianKatz requested a review from a team as a code owner August 28, 2024 18:48
Copy link
Contributor

@apeabody apeabody left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks @julianKatz!

Copy link
Contributor

@JaydipGabani JaydipGabani left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm

@apeabody apeabody merged commit 3acd611 into open-policy-agent:master Aug 29, 2024
22 checks passed
@julianKatz julianKatz deleted the confirm-wildcard-in-allow-privilege-escalation branch August 29, 2024 21:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants