Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[PodSecurity] Warn when labeling exempt namespaces #109549

Closed
tallclair opened this issue Apr 19, 2022 · 2 comments · Fixed by #109680
Closed

[PodSecurity] Warn when labeling exempt namespaces #109549

tallclair opened this issue Apr 19, 2022 · 2 comments · Fixed by #109680
Assignees
@tallclair
Labels
kind/feature Categorizes issue or PR as related to a new feature. needs-triage Indicates an issue or PR lacks a `triage/foo` label and requires one. sig/auth Categorizes an issue or PR as relevant to SIG Auth.
Projects
SIG-Auth: PodSecurity SIG Auth Old
Milestone
v1.25

Comments

@tallclair
Copy link
Member

Applying a pod security label to an exempt namespace should return a warning that the namespace is exempt, and the PSA label won't take effect.

/cc @liggitt
@tallclair tallclair added kind/feature Categorizes issue or PR as related to a new feature. sig/auth Categorizes an issue or PR as relevant to SIG Auth. labels Apr 19, 2022
@tallclair tallclair added this to the v1.25 milestone Apr 19, 2022
@tallclair tallclair self-assigned this Apr 19, 2022
@k8s-ci-robot k8s-ci-robot added the needs-triage Indicates an issue or PR lacks a `triage/foo` label and requires one. label Apr 19, 2022
@k8s-ci-robot
Copy link
Contributor

@tallclair: This issue is currently awaiting triage.

If a SIG or subproject determines this is a relevant issue, they will accept it by applying the triage/accepted label and provide further guidance.

The triage/accepted label can be added by org members by writing /triage accepted in a comment.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

@liggitt
Copy link
Member

liggitt commented Apr 20, 2022

Applying a pod security label to an exempt namespace ...

I'd tweak that to a level label other than privileged

@enj enj added this to Needs Triage in SIG Auth Old Apr 25, 2022
@tallclair tallclair mentioned this issue Apr 26, 2022
Merged
@tallclair tallclair added this to In Review in SIG-Auth: PodSecurity Apr 27, 2022
SIG Auth Old automation moved this from Needs Triage to Closed / Done May 18, 2022
SIG-Auth: PodSecurity automation moved this from In Review to Done (1.25) May 18, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@tallclair tallclair

Labels
kind/feature Categorizes issue or PR as related to a new feature. needs-triage Indicates an issue or PR lacks a `triage/foo` label and requires one. sig/auth Categorizes an issue or PR as relevant to SIG Auth.
Projects
SIG Auth
Archived in project
SIG-Auth: PodSecurity
Done (1.25)
SIG Auth Old
Closed / Done
Milestone
v1.25
Development

Successfully merging a pull request may close this issue.

[PodSecurity] Warn when adding PSA labels to exempt namespaces tallclair/kubernetes
3 participants
@liggitt @k8s-ci-robot @tallclair