PodSecurity: seccompProfile_restricted: regenerate files

This commit is contained in:
Jordan Liggitt 2021-07-07 23:50:23 -04:00
parent 88a1241299
commit 2af08d1a5a
42 changed files with 76 additions and 260 deletions

View File

@ -1,7 +1,7 @@
apiVersion: v1 apiVersion: v1
kind: Pod kind: Pod
metadata: metadata:
name: seccomp_restricted0 name: seccompprofile_restricted0
spec: spec:
containers: containers:
- image: k8s.gcr.io/pause - image: k8s.gcr.io/pause

View File

@ -1,7 +1,7 @@
apiVersion: v1 apiVersion: v1
kind: Pod kind: Pod
metadata: metadata:
name: seccomp_restricted1 name: seccompprofile_restricted1
spec: spec:
containers: containers:
- image: k8s.gcr.io/pause - image: k8s.gcr.io/pause

View File

@ -1,7 +1,7 @@
apiVersion: v1 apiVersion: v1
kind: Pod kind: Pod
metadata: metadata:
name: seccomp_restricted2 name: seccompprofile_restricted2
spec: spec:
containers: containers:
- image: k8s.gcr.io/pause - image: k8s.gcr.io/pause

View File

@ -1,7 +1,7 @@
apiVersion: v1 apiVersion: v1
kind: Pod kind: Pod
metadata: metadata:
name: seccomp_restricted3 name: seccompprofile_restricted3
spec: spec:
containers: containers:
- image: k8s.gcr.io/pause - image: k8s.gcr.io/pause

View File

@ -1,7 +1,7 @@
apiVersion: v1 apiVersion: v1
kind: Pod kind: Pod
metadata: metadata:
name: seccomp_restricted4 name: seccompprofile_restricted4
spec: spec:
containers: containers:
- image: k8s.gcr.io/pause - image: k8s.gcr.io/pause

View File

@ -1,21 +0,0 @@
apiVersion: v1
kind: Pod
metadata:
name: seccomp_restricted2
spec:
containers:
- image: k8s.gcr.io/pause
name: container1
securityContext:
allowPrivilegeEscalation: false
seccompProfile:
type: RuntimeDefault
initContainers:
- image: k8s.gcr.io/pause
name: initcontainer1
securityContext:
allowPrivilegeEscalation: false
seccompProfile:
type: RuntimeDefault
securityContext:
runAsNonRoot: true

View File

@ -1,7 +1,7 @@
apiVersion: v1 apiVersion: v1
kind: Pod kind: Pod
metadata: metadata:
name: seccomp_restricted0 name: seccompprofile_restricted0
spec: spec:
containers: containers:
- image: k8s.gcr.io/pause - image: k8s.gcr.io/pause

View File

@ -1,7 +1,7 @@
apiVersion: v1 apiVersion: v1
kind: Pod kind: Pod
metadata: metadata:
name: seccomp_restricted1 name: seccompprofile_restricted1
spec: spec:
containers: containers:
- image: k8s.gcr.io/pause - image: k8s.gcr.io/pause

View File

@ -1,7 +1,7 @@
apiVersion: v1 apiVersion: v1
kind: Pod kind: Pod
metadata: metadata:
name: seccomp_restricted3 name: seccompprofile_restricted2
spec: spec:
containers: containers:
- image: k8s.gcr.io/pause - image: k8s.gcr.io/pause
@ -9,8 +9,7 @@ spec:
securityContext: securityContext:
allowPrivilegeEscalation: false allowPrivilegeEscalation: false
seccompProfile: seccompProfile:
localhostProfile: testing type: RuntimeDefault
type: Localhost
initContainers: initContainers:
- image: k8s.gcr.io/pause - image: k8s.gcr.io/pause
name: initcontainer1 name: initcontainer1

View File

@ -1,21 +0,0 @@
apiVersion: v1
kind: Pod
metadata:
name: seccomp_restricted4
spec:
containers:
- image: k8s.gcr.io/pause
name: container1
securityContext:
allowPrivilegeEscalation: false
seccompProfile:
type: RuntimeDefault
initContainers:
- image: k8s.gcr.io/pause
name: initcontainer1
securityContext:
allowPrivilegeEscalation: false
seccompProfile:
type: Unconfined
securityContext:
runAsNonRoot: true

View File

@ -1,7 +1,7 @@
apiVersion: v1 apiVersion: v1
kind: Pod kind: Pod
metadata: metadata:
name: seccomp_restricted0 name: seccompprofile_restricted0
spec: spec:
containers: containers:
- image: k8s.gcr.io/pause - image: k8s.gcr.io/pause

View File

@ -1,7 +1,7 @@
apiVersion: v1 apiVersion: v1
kind: Pod kind: Pod
metadata: metadata:
name: seccomp_restricted1 name: seccompprofile_restricted1
spec: spec:
containers: containers:
- image: k8s.gcr.io/pause - image: k8s.gcr.io/pause

View File

@ -1,7 +1,7 @@
apiVersion: v1 apiVersion: v1
kind: Pod kind: Pod
metadata: metadata:
name: seccomp_restricted2 name: seccompprofile_restricted2
spec: spec:
containers: containers:
- image: k8s.gcr.io/pause - image: k8s.gcr.io/pause

View File

@ -1,7 +1,7 @@
apiVersion: v1 apiVersion: v1
kind: Pod kind: Pod
metadata: metadata:
name: seccomp_restricted3 name: seccompprofile_restricted3
spec: spec:
containers: containers:
- image: k8s.gcr.io/pause - image: k8s.gcr.io/pause

View File

@ -1,7 +1,7 @@
apiVersion: v1 apiVersion: v1
kind: Pod kind: Pod
metadata: metadata:
name: seccomp_restricted5 name: seccompprofile_restricted4
spec: spec:
containers: containers:
- image: k8s.gcr.io/pause - image: k8s.gcr.io/pause
@ -9,13 +9,13 @@ spec:
securityContext: securityContext:
allowPrivilegeEscalation: false allowPrivilegeEscalation: false
seccompProfile: seccompProfile:
type: Unconfined type: RuntimeDefault
initContainers: initContainers:
- image: k8s.gcr.io/pause - image: k8s.gcr.io/pause
name: initcontainer1 name: initcontainer1
securityContext: securityContext:
allowPrivilegeEscalation: false allowPrivilegeEscalation: false
seccompProfile: seccompProfile:
type: RuntimeDefault type: Unconfined
securityContext: securityContext:
runAsNonRoot: true runAsNonRoot: true

View File

@ -1,21 +0,0 @@
apiVersion: v1
kind: Pod
metadata:
name: seccomp_restricted2
spec:
containers:
- image: k8s.gcr.io/pause
name: container1
securityContext:
allowPrivilegeEscalation: false
seccompProfile:
type: RuntimeDefault
initContainers:
- image: k8s.gcr.io/pause
name: initcontainer1
securityContext:
allowPrivilegeEscalation: false
seccompProfile:
type: RuntimeDefault
securityContext:
runAsNonRoot: true

View File

@ -1,7 +1,7 @@
apiVersion: v1 apiVersion: v1
kind: Pod kind: Pod
metadata: metadata:
name: seccomp_restricted0 name: seccompprofile_restricted0
spec: spec:
containers: containers:
- image: k8s.gcr.io/pause - image: k8s.gcr.io/pause

View File

@ -1,7 +1,7 @@
apiVersion: v1 apiVersion: v1
kind: Pod kind: Pod
metadata: metadata:
name: seccomp_restricted1 name: seccompprofile_restricted1
spec: spec:
containers: containers:
- image: k8s.gcr.io/pause - image: k8s.gcr.io/pause

View File

@ -1,7 +1,7 @@
apiVersion: v1 apiVersion: v1
kind: Pod kind: Pod
metadata: metadata:
name: seccomp_restricted3 name: seccompprofile_restricted2
spec: spec:
containers: containers:
- image: k8s.gcr.io/pause - image: k8s.gcr.io/pause
@ -9,8 +9,7 @@ spec:
securityContext: securityContext:
allowPrivilegeEscalation: false allowPrivilegeEscalation: false
seccompProfile: seccompProfile:
localhostProfile: testing type: RuntimeDefault
type: Localhost
initContainers: initContainers:
- image: k8s.gcr.io/pause - image: k8s.gcr.io/pause
name: initcontainer1 name: initcontainer1

View File

@ -1,19 +0,0 @@
apiVersion: v1
kind: Pod
metadata:
name: seccomp_restricted2
spec:
containers:
- image: k8s.gcr.io/pause
name: container1
securityContext:
allowPrivilegeEscalation: false
seccompProfile:
type: RuntimeDefault
initContainers:
- image: k8s.gcr.io/pause
name: initcontainer1
securityContext:
allowPrivilegeEscalation: false
securityContext:
runAsNonRoot: true

View File

@ -1,19 +0,0 @@
apiVersion: v1
kind: Pod
metadata:
name: seccomp_restricted3
spec:
containers:
- image: k8s.gcr.io/pause
name: container1
securityContext:
allowPrivilegeEscalation: false
initContainers:
- image: k8s.gcr.io/pause
name: initcontainer1
securityContext:
allowPrivilegeEscalation: false
seccompProfile:
type: RuntimeDefault
securityContext:
runAsNonRoot: true

View File

@ -1,21 +0,0 @@
apiVersion: v1
kind: Pod
metadata:
name: seccomp_restricted4
spec:
containers:
- image: k8s.gcr.io/pause
name: container1
securityContext:
allowPrivilegeEscalation: false
seccompProfile:
type: RuntimeDefault
initContainers:
- image: k8s.gcr.io/pause
name: initcontainer1
securityContext:
allowPrivilegeEscalation: false
seccompProfile:
type: Unconfined
securityContext:
runAsNonRoot: true

View File

@ -1,21 +0,0 @@
apiVersion: v1
kind: Pod
metadata:
name: seccomp_restricted5
spec:
containers:
- image: k8s.gcr.io/pause
name: container1
securityContext:
allowPrivilegeEscalation: false
seccompProfile:
type: Unconfined
initContainers:
- image: k8s.gcr.io/pause
name: initcontainer1
securityContext:
allowPrivilegeEscalation: false
seccompProfile:
type: RuntimeDefault
securityContext:
runAsNonRoot: true

View File

@ -1,7 +1,7 @@
apiVersion: v1 apiVersion: v1
kind: Pod kind: Pod
metadata: metadata:
name: seccomp_restricted0 name: seccompprofile_restricted0
spec: spec:
containers: containers:
- image: k8s.gcr.io/pause - image: k8s.gcr.io/pause

View File

@ -1,7 +1,7 @@
apiVersion: v1 apiVersion: v1
kind: Pod kind: Pod
metadata: metadata:
name: seccomp_restricted1 name: seccompprofile_restricted1
spec: spec:
containers: containers:
- image: k8s.gcr.io/pause - image: k8s.gcr.io/pause

View File

@ -0,0 +1,19 @@
apiVersion: v1
kind: Pod
metadata:
name: seccompprofile_restricted2
spec:
containers:
- image: k8s.gcr.io/pause
name: container1
securityContext:
allowPrivilegeEscalation: false
seccompProfile:
type: RuntimeDefault
initContainers:
- image: k8s.gcr.io/pause
name: initcontainer1
securityContext:
allowPrivilegeEscalation: false
securityContext:
runAsNonRoot: true

View File

@ -0,0 +1,19 @@
apiVersion: v1
kind: Pod
metadata:
name: seccompprofile_restricted3
spec:
containers:
- image: k8s.gcr.io/pause
name: container1
securityContext:
allowPrivilegeEscalation: false
initContainers:
- image: k8s.gcr.io/pause
name: initcontainer1
securityContext:
allowPrivilegeEscalation: false
seccompProfile:
type: RuntimeDefault
securityContext:
runAsNonRoot: true

View File

@ -1,7 +1,7 @@
apiVersion: v1 apiVersion: v1
kind: Pod kind: Pod
metadata: metadata:
name: seccomp_restricted5 name: seccompprofile_restricted4
spec: spec:
containers: containers:
- image: k8s.gcr.io/pause - image: k8s.gcr.io/pause
@ -9,13 +9,13 @@ spec:
securityContext: securityContext:
allowPrivilegeEscalation: false allowPrivilegeEscalation: false
seccompProfile: seccompProfile:
type: Unconfined type: RuntimeDefault
initContainers: initContainers:
- image: k8s.gcr.io/pause - image: k8s.gcr.io/pause
name: initcontainer1 name: initcontainer1
securityContext: securityContext:
allowPrivilegeEscalation: false allowPrivilegeEscalation: false
seccompProfile: seccompProfile:
type: RuntimeDefault type: Unconfined
securityContext: securityContext:
runAsNonRoot: true runAsNonRoot: true

View File

@ -1,21 +0,0 @@
apiVersion: v1
kind: Pod
metadata:
name: seccomp_restricted2
spec:
containers:
- image: k8s.gcr.io/pause
name: container1
securityContext:
allowPrivilegeEscalation: false
seccompProfile:
type: RuntimeDefault
initContainers:
- image: k8s.gcr.io/pause
name: initcontainer1
securityContext:
allowPrivilegeEscalation: false
seccompProfile:
type: RuntimeDefault
securityContext:
runAsNonRoot: true

View File

@ -1,7 +1,7 @@
apiVersion: v1 apiVersion: v1
kind: Pod kind: Pod
metadata: metadata:
name: seccomp_restricted0 name: seccompprofile_restricted0
spec: spec:
containers: containers:
- image: k8s.gcr.io/pause - image: k8s.gcr.io/pause

View File

@ -1,7 +1,7 @@
apiVersion: v1 apiVersion: v1
kind: Pod kind: Pod
metadata: metadata:
name: seccomp_restricted1 name: seccompprofile_restricted1
spec: spec:
containers: containers:
- image: k8s.gcr.io/pause - image: k8s.gcr.io/pause

View File

@ -1,7 +1,7 @@
apiVersion: v1 apiVersion: v1
kind: Pod kind: Pod
metadata: metadata:
name: seccomp_restricted3 name: seccompprofile_restricted2
spec: spec:
containers: containers:
- image: k8s.gcr.io/pause - image: k8s.gcr.io/pause
@ -9,8 +9,7 @@ spec:
securityContext: securityContext:
allowPrivilegeEscalation: false allowPrivilegeEscalation: false
seccompProfile: seccompProfile:
localhostProfile: testing type: RuntimeDefault
type: Localhost
initContainers: initContainers:
- image: k8s.gcr.io/pause - image: k8s.gcr.io/pause
name: initcontainer1 name: initcontainer1

View File

@ -1,27 +0,0 @@
apiVersion: v1
kind: Pod
metadata:
name: seccomp_restricted5
spec:
containers:
- image: k8s.gcr.io/pause
name: container1
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
seccompProfile:
type: Unconfined
initContainers:
- image: k8s.gcr.io/pause
name: initcontainer1
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
seccompProfile:
type: RuntimeDefault
securityContext:
runAsNonRoot: true

View File

@ -1,7 +1,7 @@
apiVersion: v1 apiVersion: v1
kind: Pod kind: Pod
metadata: metadata:
name: seccomp_restricted0 name: seccompprofile_restricted0
spec: spec:
containers: containers:
- image: k8s.gcr.io/pause - image: k8s.gcr.io/pause

View File

@ -1,7 +1,7 @@
apiVersion: v1 apiVersion: v1
kind: Pod kind: Pod
metadata: metadata:
name: seccomp_restricted1 name: seccompprofile_restricted1
spec: spec:
containers: containers:
- image: k8s.gcr.io/pause - image: k8s.gcr.io/pause

View File

@ -1,7 +1,7 @@
apiVersion: v1 apiVersion: v1
kind: Pod kind: Pod
metadata: metadata:
name: seccomp_restricted2 name: seccompprofile_restricted2
spec: spec:
containers: containers:
- image: k8s.gcr.io/pause - image: k8s.gcr.io/pause

View File

@ -1,7 +1,7 @@
apiVersion: v1 apiVersion: v1
kind: Pod kind: Pod
metadata: metadata:
name: seccomp_restricted3 name: seccompprofile_restricted3
spec: spec:
containers: containers:
- image: k8s.gcr.io/pause - image: k8s.gcr.io/pause

View File

@ -1,7 +1,7 @@
apiVersion: v1 apiVersion: v1
kind: Pod kind: Pod
metadata: metadata:
name: seccomp_restricted4 name: seccompprofile_restricted4
spec: spec:
containers: containers:
- image: k8s.gcr.io/pause - image: k8s.gcr.io/pause

View File

@ -1,27 +0,0 @@
apiVersion: v1
kind: Pod
metadata:
name: seccomp_restricted2
spec:
containers:
- image: k8s.gcr.io/pause
name: container1
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
seccompProfile:
type: RuntimeDefault
initContainers:
- image: k8s.gcr.io/pause
name: initcontainer1
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
seccompProfile:
type: RuntimeDefault
securityContext:
runAsNonRoot: true

View File

@ -1,7 +1,7 @@
apiVersion: v1 apiVersion: v1
kind: Pod kind: Pod
metadata: metadata:
name: seccomp_restricted0 name: seccompprofile_restricted0
spec: spec:
containers: containers:
- image: k8s.gcr.io/pause - image: k8s.gcr.io/pause

View File

@ -1,7 +1,7 @@
apiVersion: v1 apiVersion: v1
kind: Pod kind: Pod
metadata: metadata:
name: seccomp_restricted1 name: seccompprofile_restricted1
spec: spec:
containers: containers:
- image: k8s.gcr.io/pause - image: k8s.gcr.io/pause

View File

@ -1,7 +1,7 @@
apiVersion: v1 apiVersion: v1
kind: Pod kind: Pod
metadata: metadata:
name: seccomp_restricted3 name: seccompprofile_restricted2
spec: spec:
containers: containers:
- image: k8s.gcr.io/pause - image: k8s.gcr.io/pause
@ -12,8 +12,7 @@ spec:
drop: drop:
- ALL - ALL
seccompProfile: seccompProfile:
localhostProfile: testing type: RuntimeDefault
type: Localhost
initContainers: initContainers:
- image: k8s.gcr.io/pause - image: k8s.gcr.io/pause
name: initcontainer1 name: initcontainer1