Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add PodSecurityPolicy to charts #88

Merged
merged 1 commit into from
Jun 16, 2020
Merged

Add PodSecurityPolicy to charts #88

merged 1 commit into from
Jun 16, 2020

Conversation

mvladev
Copy link

@mvladev mvladev commented Jun 5, 2020 •
edited

What this PR does / why we need it:

Adds PodSecurityPolicy for clusters using a PodSecurityPolicy admission controller.

Which issue(s) this PR fixes:
Fixes # n/a

Special notes for your reviewer:

Release note:

`PodSecurityPolicy` has been added and all linux capabilities are dropped by default. The UID and GID of `dns-controller-manager` container are now both `65534`.

@mvladev mvladev requested a review from mandelsoft as a code owner June 5, 2020 04:29
@gardener-robot-ci-3 gardener-robot-ci-3 added the reviewed/ok-to-test Has approval for testing (check PR in detail before setting this label because PR is run on CI/CD) label Jun 5, 2020
@gardener-robot-ci-1 gardener-robot-ci-1 added needs/ok-to-test Needs approval for testing (check PR in detail before setting this label because PR is run on CI/CD) and removed reviewed/ok-to-test Has approval for testing (check PR in detail before setting this label because PR is run on CI/CD) labels Jun 5, 2020
MartinWeindel
MartinWeindel approved these changes Jun 16, 2020
View reviewed changes
Copy link
Member

@MartinWeindel MartinWeindel left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm

@MartinWeindel MartinWeindel merged commit f63c33d into gardener:master Jun 16, 2020
MartinWeindel added a commit that referenced this pull request Jun 16, 2020
@MartinWeindel
Merge pull request #88 from mvladev/add-podsecurity-policy
2b25880 
Add PodSecurityPolicy to charts
@mvladev mvladev deleted the add-podsecurity-policy branch June 16, 2020 09:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@MartinWeindel MartinWeindel MartinWeindel approved these changes

@mandelsoft mandelsoft Awaiting requested review from mandelsoft

Assignees
No one assigned
Labels
needs/ok-to-test Needs approval for testing (check PR in detail before setting this label because PR is run on CI/CD)
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

None yet
4 participants
@mvladev @MartinWeindel @gardener-robot-ci-1 @gardener-robot-ci-3