kubernetes

mirror of https://github.com/k3s-io/kubernetes.git synced 2026-01-04 23:17:50 +00:00

Files

Kubernetes Submit Queue 60c1c1e8ae Merge pull request #47073 from Q-Lee/psp-run-as-non-root

Automatic merge from submit-queue (batch tested with PRs 47073, 47457, 47479)

PodSecurityPolicy should respect and validate user-supplied RunAsNonR…

**What this PR does / why we need it**: PodSecurityPolicies overwrite and then fail to validate the RunAsNonRoot field in the container security context.

**Which issue this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close that issue when PR gets merged)*: fixes #47071

**Special notes for your reviewer**: gce/gke don't use this in 1.6. You'll need to speak up if you think this is important enough to patch. It should almost certainly go into 1.7.

**Release note**:


```release-note
PodSecurityPolicy now recognizes pods that specify `runAsNonRoot: false` in their security context and does not overwrite the specified value
```

2017-06-14 01:52:12 -07:00

apparmor

autogenerated

2017-04-14 10:40:57 -07:00

capabilities

autogenerated

2017-04-14 10:40:57 -07:00

group

Use dedicated Unix User and Group ID types

2017-05-05 14:07:38 +02:00

seccomp

autogenerated