add "add_inheritable_capabilities" option #6236
Conversation
openshift-ci
bot
added
release-note
openshift-ci
bot
added
the
approved
Codecov Report
Additional details and impacted files@@ Coverage Diff @@
## main #6236 +/- ##
==========================================
- Coverage 43.62% 43.59% -0.04%
==========================================
Files 122 122
Lines 13583 13607 +24
==========================================
+ Hits 5926 5932 +6
- Misses 7017 7031 +14
- Partials 640 644 +4 |
Signed-off-by: Peter Hunt~ <pehunt@redhat.com>
Signed-off-by: Peter Hunt~ <pehunt@redhat.com>
haircommander
force-pushed
the
add-inheritable-capabilities
branch
from
6041547
to
406f367
Compare
|
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: haircommander, saschagrunert The full list of commands accepted by this bot can be found here. The pull request process is described here
Needs approval from an approver in each of these files:
Approvers can indicate their approval by writing |
|
/test ci-integration |
|
@saschagrunert: Overrode contexts on behalf of saschagrunert: ci/prow/ci-e2e-conmonrs In response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. |
|
/override ci/prow/e2e-agnostic |
|
@haircommander: Overrode contexts on behalf of haircommander: ci/prow/e2e-agnostic In response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. |
|
/cherry-pick release-1.25 |
|
@haircommander: once the present PR merges, I will cherry-pick it on top of release-1.25 in a new PR and assign it to you. In response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. |
|
/override ci/prow/ci-rhel-integration |
|
@saschagrunert: Overrode contexts on behalf of saschagrunert: ci/prow/ci-e2e-conmonrs, ci/prow/ci-rhel-integration In response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. |
|
/override ci/prow/ci-e2e-conmonrs |
|
@saschagrunert: Overrode contexts on behalf of saschagrunert: ci/prow/ci-e2e-conmonrs In response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. |
|
/retest |
|
@haircommander: new pull request created: #6249 In response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. |
What type of PR is this?
/kind feature
What this PR does / why we need it:
add an option to re-add the inheritable capabilities. there are situations where users previously expected non-root users to get these capabilities, which adding them to the inheritable list enabled.
related to kubernetes/kubernetes#111196 and GHSA-4hj2-r2pm-3hc6
Which issue(s) this PR fixes:
Special notes for your reviewer:
Does this PR introduce a user-facing change?