Remove test values for `ProcMount`
ProcMount cannot be tested due to newer versions of Kubernetes mutating the value to Default
. So you cannot set invalid values or unmasked. For that reason, we have already disabled the constraint. But, the ProcMount values are still in bad.yaml
. These cause problems when trying to deploy to a cluster with PodSecurityPolicies enabled (e.g. RKE2). The PSPs will deny the pod access to the cluster due to the ProcMount. Therefore, the test pod never makes it to Gatekeeper. You cannot override the allowedProcMountTypes in the PSP (Kubernetes also mutates this to ignore the value). So, the only way around this is to remove those values.