mirror of
https://github.com/k3s-io/kubernetes.git
synced 2026-07-22 17:51:28 +00:00
The test expects unauthorized pods to be blocked from accessing cached private images, but the default policy (NeverVerifyPreloadedImages) allows access to any image previously pulled by the kubelet. Configure the kubelet to use AlwaysVerify policy for this test, which enforces credential checks for all images regardless of pull history. Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
4.8 KiB
4.8 KiB