This repository was archived by the owner on Jun 1, 2025. It is now read-only.
2025.3.24
Usage
Specify one or more of the available overlays in your local kustomization.yaml:
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
# use the 'all' overlay to get all available policies
- https://github.com/metio/vap-collection//overlays/all/?ref=2025.3.24
# or select individual overlay for specific policies
- https://github.com/metio/vap-collection//overlays/best-practices/?ref=2025.3.24
- https://github.com/metio/vap-collection//overlays/pod-security-standards-baseline/?ref=2025.3.24
- https://github.com/metio/vap-collection//overlays/pod-security-standards-restricted/?ref=2025.3.24Check the migration guide for any required actions on your part.
What's Changed
- add require-run-as-non-root-user policy by @sebhoss in #29
- simplify restrict-seccomp-profile-types by @sebhoss in #30
- add require-seccomp-profile-type policy by @sebhoss in #31
- add restrict-volume-types policy by @sebhoss in #32
Full Changelog: 2025.3.17...2025.3.24