Skip to content

Commit 4ca5ff6

Browse files
committed
PodSecurity: remove optional non-root group check
1 parent 8917b26 commit 4ca5ff6

File tree

1 file changed

+0
-20
lines changed

1 file changed

+0
-20
lines changed

content/en/docs/concepts/security/pod-security-standards.md

Lines changed: 0 additions & 20 deletions
Original file line numberDiff line numberDiff line change
@@ -379,26 +379,6 @@ fail validation.
379379
</ul>
380380
</td>
381381
</tr>
382-
<tr>
383-
<td style="white-space: nowrap">Non-root groups <em>(optional)</em></td>
384-
<td>
385-
<p>Containers should be forbidden from running with a root primary or supplementary GID.</p>
386-
<p><strong>Restricted Fields</strong></p>
387-
<ul>
388-
<li><code>spec.securityContext.runAsGroup</code></li>
389-
<li><code>spec.securityContext.supplementalGroups[*]</code></li>
390-
<li><code>spec.securityContext.fsGroup</code></li>
391-
<li><code>spec.containers[*].securityContext.runAsGroup</code></li>
392-
<li><code>spec.initContainers[*].securityContext.runAsGroup</code></li>
393-
<li><code>spec.ephemeralContainers[*].securityContext.runAsGroup</code></li>
394-
</ul>
395-
<p><strong>Allowed Values</strong></p>
396-
<ul>
397-
<li>Undefined/nil (except for <code>*.runAsGroup</code>)</li>
398-
<li>Non-zero</li>
399-
</ul>
400-
</td>
401-
</tr>
402382
<tr>
403383
<td style="white-space: nowrap">Seccomp (v1.19+)</td>
404384
<td>

0 commit comments

Comments
 (0)