Skip to content

Commit

Permalink
Update current feature
Browse files Browse the repository at this point in the history
  • Loading branch information
fjammes committed Apr 10, 2024
1 parent e256914 commit 3129bc2
Showing 1 changed file with 2 additions and 1 deletion.
3 changes: 2 additions & 1 deletion labs/3_policies/ex3-scc.sh
Original file line number Diff line number Diff line change
Expand Up @@ -130,9 +130,10 @@ oc adm policy add-scc-to-user anyuid -z $SA
ink "Check if service account can create pod ubuntu-root"
oc adm policy scc-review -z system:serviceaccount:"$NS":$SA -f $tmp_dir/ubuntu-root.yaml

ink "Create pod ubuntu-root"
ink "Create pod ubuntu-root with success"
kubectl-user create -f $tmp_dir/ubuntu-root.yaml

ink "Try to create pod ubuntu-privileged"
if kubectl-user create -f $tmp_dir/ubuntu-privileged.yaml
then
ink -r "ERROR: User '$SA' should not be able to create privileged pod"
Expand Down

0 comments on commit 3129bc2

Please sign in to comment.