github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2025-07-29 22:46:12 +00:00
Code Issues Projects Releases Wiki Activity

Rename to capabilities_restricted

Browse Source
This commit is contained in:
Jordan Liggitt 2021-07-07 10:46:52 -04:00
parent 08608a24f1
commit 250f47a45c
2 changed files with 8 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
staging/src/k8s.io/pod-security-admission/policy/check_dropCapabilities.go → staging/src/k8s.io/pod-security-admission/policy/check_capabilities_restricted.go
View File

@ -33,25 +33,25 @@ const (
)
func init() {
addCheck(CheckDropCapabilities)
addCheck(CheckCapabilitiesRestricted)
}
// CheckDropCapabilities returns a restricted level check
// that ensures all capabilities are dropped in 1.22+
func CheckDropCapabilities() Check {
// CheckCapabilitiesRestricted returns a restricted level check
// that ensures ALL capabilities are dropped in 1.22+
func CheckCapabilitiesRestricted() Check {
return Check{
ID: "dropCapabilities",
ID: "capabilities_restricted",
Level: api.LevelRestricted,
Versions: []VersionedCheck{
{
MinimumVersion: api.MajorMinorVersion(1, 22),
CheckPod: dropCapabilities_1_22,
CheckPod: capabilitiesRestricted_1_22,
},
},
}
}
func dropCapabilities_1_22(podMetadata *metav1.ObjectMeta, podSpec *corev1.PodSpec) CheckResult {
func capabilitiesRestricted_1_22(podMetadata *metav1.ObjectMeta, podSpec *corev1.PodSpec) CheckResult {
var (
containersMissingDropAll []string
containersAddingForbidden []string

2
staging/src/k8s.io/pod-security-admission/test/fixtures_dropCapabilities.go → staging/src/k8s.io/pod-security-admission/test/fixtures_capabilities_restricted.go
View File

@ -90,7 +90,7 @@ func init() {
}
registerFixtureGenerator(
fixtureKey{level: api.LevelRestricted, version: api.MajorMinorVersion(1, 22), check: "dropCapabilities"},
fixtureKey{level: api.LevelRestricted, version: api.MajorMinorVersion(1, 22), check: "capabilities_restricted"},
fixtureData_1_22,
)
}