Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Seccomp mutation for both notations #411

Closed
wants to merge 11 commits into from

Conversation

alexarefev
Copy link

@alexarefev alexarefev commented Sep 27, 2023

What this PR does / why we need it:

Currently, Seccomp mutation rule work only for pod annotation. Seccomp mutation for Pod spec.securityContext.seccompProfile should be supported.

Which issue(s) does this PR fix:
Fixes #

Special notes for your reviewer:

@alexarefev alexarefev marked this pull request as ready for review September 28, 2023 06:31
Signed-off-by: Aleksandr Arefev <[email protected]>
Signed-off-by: Aleksandr Arefev <[email protected]>
Signed-off-by: Aleksandr Arefev <[email protected]>
Signed-off-by: Aleksandr Arefev <[email protected]>
Signed-off-by: Aleksandr Arefev <[email protected]>
Signed-off-by: Aleksandr Arefev <[email protected]>
Signed-off-by: Aleksandr Arefev <[email protected]>
Signed-off-by: Aleksandr Arefev <[email protected]>
Signed-off-by: Aleksandr Arefev <[email protected]>
Signed-off-by: Aleksandr Arefev <[email protected]>
Signed-off-by: Aleksandr Arefev <[email protected]>
@@ -7,23 +7,30 @@ title: seccomp

### Usage
```shell
kubectl apply -f https://raw.githubusercontent.com/open-policy-agent/gatekeeper-library/master/mutation/pod-security-policy/seccomp/samples/mutation.yaml
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hmm, looks like we are missing mutation-annotation.

@nilekhc Looks like the website generator currently will only retain the final mutation sample per directory? https://github.com/open-policy-agent/gatekeeper-library/blob/master/scripts/website/generate.go#L226

Copy link

stale bot commented Dec 26, 2023

This issue/PR has been automatically marked as stale because it has not had recent activity. It will be closed in 14 days if no further activity occurs. Thank you for your contributions.

@stale stale bot added the stale label Dec 26, 2023
@apeabody apeabody removed the stale label Dec 26, 2023
Copy link

stale bot commented Feb 24, 2024

This issue/PR has been automatically marked as stale because it has not had recent activity. It will be closed in 14 days if no further activity occurs. Thank you for your contributions.

@stale stale bot added the stale label Feb 24, 2024
@stale stale bot closed this Mar 9, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants