falco/test/psps/privilege_escalation.yaml at embed-lua-scripts - falco - Gitea: Git with a cup of tea at home

github/falco

mirror of https://github.com/falcosecurity/falco.git synced 2026-03-19 11:12:36 +00:00

Files

Mark Stemm d21e69cf9a Use falcoctl 0.0.3 w/ unique names

Use the changes in https://github.com/falcosecurity/falcoctl/pull/25
that make sure rules, macros, lists, and rule names all have a unique
prefix. In this case the prefix is based on the psp name, so make sure
the psp name actually reflects what it does--there were a few
cut-and-paste carryovers.

This test assumes that falcoctl will be tagged/released as 0.0.3--the
tests won't pass until the falcoctl PR is merged and there's a release.

Signed-off-by: Mark Stemm <mark.stemm@gmail.com>

2019-10-23 10:45:03 -07:00

9 lines

186 B

YAML

Raw Permalink Blame History

 apiVersion: policy/v1beta1
 kind: PodSecurityPolicy
 metadata:
   annotations:
     falco-rules-psp-images: "[nginx]"
   name: no_privilege_escalation
 spec:
   allowPrivilegeEscalation: false