fix rule names of policy exception (#1637)

* fix rule names of policy exception * update changelog * update nancy-ignore
giantswarm · Aug 3, 2023 · bc3faa9 · bc3faa9
1 parent dab26b4
commit bc3faa9
Show file tree

Hide file tree

Showing 3 changed files with 9 additions and 3 deletions.
diff --git a/.nancy-ignore b/.nancy-ignore
@@ -19,4 +19,4 @@ CVE-2023-29401
 CVE-2023-26125
 
 # golang/google.golang.org/grpc@v1.52.0
-CVE-2023-32731 until=2023-07-30
+CVE-2023-32731 until=2023-08-30
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -7,6 +7,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Fixed
+
+- Fix rule names of PolicyException.
+
 ### Changed
 
 - Patch app operator version on all apps instead of just optional ones.

diff --git a/helm/cluster-operator/templates/pss-exceptions.yaml b/helm/cluster-operator/templates/pss-exceptions.yaml
@@ -7,8 +7,10 @@ spec:
   exceptions:
   - policyName: disallow-capabilities-strict
     ruleNames:
-    - disallow-capabilities
-    - autogen-disallow-capabilities
+    - adding-capabilities-strict
+    - autogen-adding-capabilities-strict
+    - require-drop-all
+    - autogen-require-drop-all
   - policyName: disallow-privilege-escalation
     ruleNames:
     - privilege-escalation