UNCLASSIFIED - NO CUI

Skip to content

Draft: add capabilies drop all

Robert Massey requested to merge add-drop-all-capabilites into main

General MR

Summary

For packages that violate require-drop-all-capabilities, add drop all in the container securityContext for containers in the package's podSpec.

capabilities:
  drop:
    - all

Test package with drop all and ensure necessary capabilities are listed.

Relevant logs/screenshots

image

image

Linked Issue

issue

Upgrade Notices

N/A

Edited by Sean Thomas

Merge request reports