Skip to content

Dialer pod does not conform to restricted pod security profile #3517

@lkingland

Description

@lkingland

The in-cluster dialer pod used during deployment does not set the
security context fields required by the "restricted" pod security
profile: allowPrivilegeEscalation, capabilities drop, runAsNonRoot,
and seccompProfile.

This produces warnings on clusters enforcing pod security admission
and will fail on clusters that enforce (rather than warn) the
restricted profile.

Related: SRVOCF-445

Metadata

Metadata

Assignees

Labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions