PodSecurity: seccompProfile_restricted: regenerate files

This commit is contained in:
Jordan Liggitt 2021-07-07 23:50:23 -04:00
parent 88a1241299
commit 2af08d1a5a
42 changed files with 76 additions and 260 deletions

View File

@ -1,7 +1,7 @@
apiVersion: v1
kind: Pod
metadata:
name: seccomp_restricted0
name: seccompprofile_restricted0
spec:
containers:
- image: k8s.gcr.io/pause

View File

@ -1,7 +1,7 @@
apiVersion: v1
kind: Pod
metadata:
name: seccomp_restricted1
name: seccompprofile_restricted1
spec:
containers:
- image: k8s.gcr.io/pause

View File

@ -1,7 +1,7 @@
apiVersion: v1
kind: Pod
metadata:
name: seccomp_restricted2
name: seccompprofile_restricted2
spec:
containers:
- image: k8s.gcr.io/pause

View File

@ -1,7 +1,7 @@
apiVersion: v1
kind: Pod
metadata:
name: seccomp_restricted3
name: seccompprofile_restricted3
spec:
containers:
- image: k8s.gcr.io/pause

View File

@ -1,7 +1,7 @@
apiVersion: v1
kind: Pod
metadata:
name: seccomp_restricted4
name: seccompprofile_restricted4
spec:
containers:
- image: k8s.gcr.io/pause

View File

@ -1,21 +0,0 @@
apiVersion: v1
kind: Pod
metadata:
name: seccomp_restricted2
spec:
containers:
- image: k8s.gcr.io/pause
name: container1
securityContext:
allowPrivilegeEscalation: false
seccompProfile:
type: RuntimeDefault
initContainers:
- image: k8s.gcr.io/pause
name: initcontainer1
securityContext:
allowPrivilegeEscalation: false
seccompProfile:
type: RuntimeDefault
securityContext:
runAsNonRoot: true

View File

@ -1,7 +1,7 @@
apiVersion: v1
kind: Pod
metadata:
name: seccomp_restricted0
name: seccompprofile_restricted0
spec:
containers:
- image: k8s.gcr.io/pause

View File

@ -1,7 +1,7 @@
apiVersion: v1
kind: Pod
metadata:
name: seccomp_restricted1
name: seccompprofile_restricted1
spec:
containers:
- image: k8s.gcr.io/pause

View File

@ -1,7 +1,7 @@
apiVersion: v1
kind: Pod
metadata:
name: seccomp_restricted3
name: seccompprofile_restricted2
spec:
containers:
- image: k8s.gcr.io/pause
@ -9,8 +9,7 @@ spec:
securityContext:
allowPrivilegeEscalation: false
seccompProfile:
localhostProfile: testing
type: Localhost
type: RuntimeDefault
initContainers:
- image: k8s.gcr.io/pause
name: initcontainer1

View File

@ -1,21 +0,0 @@
apiVersion: v1
kind: Pod
metadata:
name: seccomp_restricted4
spec:
containers:
- image: k8s.gcr.io/pause
name: container1
securityContext:
allowPrivilegeEscalation: false
seccompProfile:
type: RuntimeDefault
initContainers:
- image: k8s.gcr.io/pause
name: initcontainer1
securityContext:
allowPrivilegeEscalation: false
seccompProfile:
type: Unconfined
securityContext:
runAsNonRoot: true

View File

@ -1,7 +1,7 @@
apiVersion: v1
kind: Pod
metadata:
name: seccomp_restricted0
name: seccompprofile_restricted0
spec:
containers:
- image: k8s.gcr.io/pause

View File

@ -1,7 +1,7 @@
apiVersion: v1
kind: Pod
metadata:
name: seccomp_restricted1
name: seccompprofile_restricted1
spec:
containers:
- image: k8s.gcr.io/pause

View File

@ -1,7 +1,7 @@
apiVersion: v1
kind: Pod
metadata:
name: seccomp_restricted2
name: seccompprofile_restricted2
spec:
containers:
- image: k8s.gcr.io/pause

View File

@ -1,7 +1,7 @@
apiVersion: v1
kind: Pod
metadata:
name: seccomp_restricted3
name: seccompprofile_restricted3
spec:
containers:
- image: k8s.gcr.io/pause

View File

@ -1,7 +1,7 @@
apiVersion: v1
kind: Pod
metadata:
name: seccomp_restricted5
name: seccompprofile_restricted4
spec:
containers:
- image: k8s.gcr.io/pause
@ -9,13 +9,13 @@ spec:
securityContext:
allowPrivilegeEscalation: false
seccompProfile:
type: Unconfined
type: RuntimeDefault
initContainers:
- image: k8s.gcr.io/pause
name: initcontainer1
securityContext:
allowPrivilegeEscalation: false
seccompProfile:
type: RuntimeDefault
type: Unconfined
securityContext:
runAsNonRoot: true

View File

@ -1,21 +0,0 @@
apiVersion: v1
kind: Pod
metadata:
name: seccomp_restricted2
spec:
containers:
- image: k8s.gcr.io/pause
name: container1
securityContext:
allowPrivilegeEscalation: false
seccompProfile:
type: RuntimeDefault
initContainers:
- image: k8s.gcr.io/pause
name: initcontainer1
securityContext:
allowPrivilegeEscalation: false
seccompProfile:
type: RuntimeDefault
securityContext:
runAsNonRoot: true

View File

@ -1,7 +1,7 @@
apiVersion: v1
kind: Pod
metadata:
name: seccomp_restricted0
name: seccompprofile_restricted0
spec:
containers:
- image: k8s.gcr.io/pause

View File

@ -1,7 +1,7 @@
apiVersion: v1
kind: Pod
metadata:
name: seccomp_restricted1
name: seccompprofile_restricted1
spec:
containers:
- image: k8s.gcr.io/pause

View File

@ -1,7 +1,7 @@
apiVersion: v1
kind: Pod
metadata:
name: seccomp_restricted3
name: seccompprofile_restricted2
spec:
containers:
- image: k8s.gcr.io/pause
@ -9,8 +9,7 @@ spec:
securityContext:
allowPrivilegeEscalation: false
seccompProfile:
localhostProfile: testing
type: Localhost
type: RuntimeDefault
initContainers:
- image: k8s.gcr.io/pause
name: initcontainer1

View File

@ -1,19 +0,0 @@
apiVersion: v1
kind: Pod
metadata:
name: seccomp_restricted2
spec:
containers:
- image: k8s.gcr.io/pause
name: container1
securityContext:
allowPrivilegeEscalation: false
seccompProfile:
type: RuntimeDefault
initContainers:
- image: k8s.gcr.io/pause
name: initcontainer1
securityContext:
allowPrivilegeEscalation: false
securityContext:
runAsNonRoot: true

View File

@ -1,19 +0,0 @@
apiVersion: v1
kind: Pod
metadata:
name: seccomp_restricted3
spec:
containers:
- image: k8s.gcr.io/pause
name: container1
securityContext:
allowPrivilegeEscalation: false
initContainers:
- image: k8s.gcr.io/pause
name: initcontainer1
securityContext:
allowPrivilegeEscalation: false
seccompProfile:
type: RuntimeDefault
securityContext:
runAsNonRoot: true

View File

@ -1,21 +0,0 @@
apiVersion: v1
kind: Pod
metadata:
name: seccomp_restricted4
spec:
containers:
- image: k8s.gcr.io/pause
name: container1
securityContext:
allowPrivilegeEscalation: false
seccompProfile:
type: RuntimeDefault
initContainers:
- image: k8s.gcr.io/pause
name: initcontainer1
securityContext:
allowPrivilegeEscalation: false
seccompProfile:
type: Unconfined
securityContext:
runAsNonRoot: true

View File

@ -1,21 +0,0 @@
apiVersion: v1
kind: Pod
metadata:
name: seccomp_restricted5
spec:
containers:
- image: k8s.gcr.io/pause
name: container1
securityContext:
allowPrivilegeEscalation: false
seccompProfile:
type: Unconfined
initContainers:
- image: k8s.gcr.io/pause
name: initcontainer1
securityContext:
allowPrivilegeEscalation: false
seccompProfile:
type: RuntimeDefault
securityContext:
runAsNonRoot: true

View File

@ -1,7 +1,7 @@
apiVersion: v1
kind: Pod
metadata:
name: seccomp_restricted0
name: seccompprofile_restricted0
spec:
containers:
- image: k8s.gcr.io/pause

View File

@ -1,7 +1,7 @@
apiVersion: v1
kind: Pod
metadata:
name: seccomp_restricted1
name: seccompprofile_restricted1
spec:
containers:
- image: k8s.gcr.io/pause

View File

@ -0,0 +1,19 @@
apiVersion: v1
kind: Pod
metadata:
name: seccompprofile_restricted2
spec:
containers:
- image: k8s.gcr.io/pause
name: container1
securityContext:
allowPrivilegeEscalation: false
seccompProfile:
type: RuntimeDefault
initContainers:
- image: k8s.gcr.io/pause
name: initcontainer1
securityContext:
allowPrivilegeEscalation: false
securityContext:
runAsNonRoot: true

View File

@ -0,0 +1,19 @@
apiVersion: v1
kind: Pod
metadata:
name: seccompprofile_restricted3
spec:
containers:
- image: k8s.gcr.io/pause
name: container1
securityContext:
allowPrivilegeEscalation: false
initContainers:
- image: k8s.gcr.io/pause
name: initcontainer1
securityContext:
allowPrivilegeEscalation: false
seccompProfile:
type: RuntimeDefault
securityContext:
runAsNonRoot: true

View File

@ -1,7 +1,7 @@
apiVersion: v1
kind: Pod
metadata:
name: seccomp_restricted5
name: seccompprofile_restricted4
spec:
containers:
- image: k8s.gcr.io/pause
@ -9,13 +9,13 @@ spec:
securityContext:
allowPrivilegeEscalation: false
seccompProfile:
type: Unconfined
type: RuntimeDefault
initContainers:
- image: k8s.gcr.io/pause
name: initcontainer1
securityContext:
allowPrivilegeEscalation: false
seccompProfile:
type: RuntimeDefault
type: Unconfined
securityContext:
runAsNonRoot: true

View File

@ -1,21 +0,0 @@
apiVersion: v1
kind: Pod
metadata:
name: seccomp_restricted2
spec:
containers:
- image: k8s.gcr.io/pause
name: container1
securityContext:
allowPrivilegeEscalation: false
seccompProfile:
type: RuntimeDefault
initContainers:
- image: k8s.gcr.io/pause
name: initcontainer1
securityContext:
allowPrivilegeEscalation: false
seccompProfile:
type: RuntimeDefault
securityContext:
runAsNonRoot: true

View File

@ -1,7 +1,7 @@
apiVersion: v1
kind: Pod
metadata:
name: seccomp_restricted0
name: seccompprofile_restricted0
spec:
containers:
- image: k8s.gcr.io/pause

View File

@ -1,7 +1,7 @@
apiVersion: v1
kind: Pod
metadata:
name: seccomp_restricted1
name: seccompprofile_restricted1
spec:
containers:
- image: k8s.gcr.io/pause

View File

@ -1,7 +1,7 @@
apiVersion: v1
kind: Pod
metadata:
name: seccomp_restricted3
name: seccompprofile_restricted2
spec:
containers:
- image: k8s.gcr.io/pause
@ -9,8 +9,7 @@ spec:
securityContext:
allowPrivilegeEscalation: false
seccompProfile:
localhostProfile: testing
type: Localhost
type: RuntimeDefault
initContainers:
- image: k8s.gcr.io/pause
name: initcontainer1

View File

@ -1,27 +0,0 @@
apiVersion: v1
kind: Pod
metadata:
name: seccomp_restricted5
spec:
containers:
- image: k8s.gcr.io/pause
name: container1
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
seccompProfile:
type: Unconfined
initContainers:
- image: k8s.gcr.io/pause
name: initcontainer1
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
seccompProfile:
type: RuntimeDefault
securityContext:
runAsNonRoot: true

View File

@ -1,7 +1,7 @@
apiVersion: v1
kind: Pod
metadata:
name: seccomp_restricted0
name: seccompprofile_restricted0
spec:
containers:
- image: k8s.gcr.io/pause

View File

@ -1,7 +1,7 @@
apiVersion: v1
kind: Pod
metadata:
name: seccomp_restricted1
name: seccompprofile_restricted1
spec:
containers:
- image: k8s.gcr.io/pause

View File

@ -1,7 +1,7 @@
apiVersion: v1
kind: Pod
metadata:
name: seccomp_restricted2
name: seccompprofile_restricted2
spec:
containers:
- image: k8s.gcr.io/pause

View File

@ -1,7 +1,7 @@
apiVersion: v1
kind: Pod
metadata:
name: seccomp_restricted3
name: seccompprofile_restricted3
spec:
containers:
- image: k8s.gcr.io/pause

View File

@ -1,7 +1,7 @@
apiVersion: v1
kind: Pod
metadata:
name: seccomp_restricted4
name: seccompprofile_restricted4
spec:
containers:
- image: k8s.gcr.io/pause

View File

@ -1,27 +0,0 @@
apiVersion: v1
kind: Pod
metadata:
name: seccomp_restricted2
spec:
containers:
- image: k8s.gcr.io/pause
name: container1
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
seccompProfile:
type: RuntimeDefault
initContainers:
- image: k8s.gcr.io/pause
name: initcontainer1
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
seccompProfile:
type: RuntimeDefault
securityContext:
runAsNonRoot: true

View File

@ -1,7 +1,7 @@
apiVersion: v1
kind: Pod
metadata:
name: seccomp_restricted0
name: seccompprofile_restricted0
spec:
containers:
- image: k8s.gcr.io/pause

View File

@ -1,7 +1,7 @@
apiVersion: v1
kind: Pod
metadata:
name: seccomp_restricted1
name: seccompprofile_restricted1
spec:
containers:
- image: k8s.gcr.io/pause

View File

@ -1,7 +1,7 @@
apiVersion: v1
kind: Pod
metadata:
name: seccomp_restricted3
name: seccompprofile_restricted2
spec:
containers:
- image: k8s.gcr.io/pause
@ -12,8 +12,7 @@ spec:
drop:
- ALL
seccompProfile:
localhostProfile: testing
type: Localhost
type: RuntimeDefault
initContainers:
- image: k8s.gcr.io/pause
name: initcontainer1