fix(helm): Capitalize capabilities.drop[] due to PSS (#544)

openclarity · Oct 28, 2023 · 952f544 · 952f544
1 parent 034a6f2
commit 952f544
Show file tree

Hide file tree

Showing 6 changed files with 15 additions and 15 deletions.
diff --git a/charts/kubeclarity/templates/deployment.yaml b/charts/kubeclarity/templates/deployment.yaml
@@ -55,7 +55,7 @@ spec:
           securityContext:
             capabilities:
               drop:
-                - all
+                - ALL
             runAsNonRoot: true
           {{- if not .Values.global.openShiftRestricted }}
             runAsUser: 1001
@@ -78,7 +78,7 @@ spec:
           securityContext:
             capabilities:
               drop:
-                - all
+                - ALL
             runAsNonRoot: true
           {{- if not .Values.global.openShiftRestricted }}
             runAsUser: 1001
@@ -102,7 +102,7 @@ spec:
           securityContext:
             capabilities:
               drop:
-                - all
+                - ALL
             runAsNonRoot: true
           {{- if not .Values.global.openShiftRestricted }}
             runAsUser: 1001
@@ -189,7 +189,7 @@ spec:
           securityContext:
             capabilities:
               drop:
-                - all
+                - ALL
             runAsNonRoot: true
             {{- if not .Values.global.openShiftRestricted }}
             runAsGroup: 1000

diff --git a/charts/kubeclarity/templates/grype_server/deployment.yaml b/charts/kubeclarity/templates/grype_server/deployment.yaml
@@ -69,7 +69,7 @@ spec:
           securityContext:
             capabilities:
               drop:
-                - all
+                - ALL
             runAsNonRoot: true
             {{- if not .Values.global.openShiftRestricted }}
             runAsGroup: 1000

diff --git a/charts/kubeclarity/templates/sbom_db/deployment.yaml b/charts/kubeclarity/templates/sbom_db/deployment.yaml
@@ -62,7 +62,7 @@ spec:
           securityContext:
             capabilities:
               drop:
-                - all
+                - ALL
             runAsNonRoot: true
             {{- if not .Values.global.openShiftRestricted }}
             runAsGroup: 1000

diff --git a/charts/kubeclarity/templates/scanner-template-configmap.yaml b/charts/kubeclarity/templates/scanner-template-configmap.yaml
@@ -133,7 +133,7 @@ data:
             securityContext:
               capabilities:
                 drop:
-                - all
+                - ALL
               runAsNonRoot: true
               {{- if not .Values.global.openShiftRestricted }}
               runAsGroup: 1001
@@ -182,7 +182,7 @@ data:
             securityContext:
               capabilities:
                 drop:
-                  - all
+                  - ALL
               runAsNonRoot: true
               {{- if not .Values.global.openShiftRestricted }}
               runAsGroup: 1001

diff --git a/runtime_scan/pkg/config/scanner_template.go b/runtime_scan/pkg/config/scanner_template.go
@@ -50,7 +50,7 @@ spec:
       securityContext:
         capabilities:
           drop:
-          - all
+          - ALL
         runAsNonRoot: true
         runAsGroup: 1001
         runAsUser: 1001

diff --git a/runtime_scan/pkg/scanner/job_managment_test.go b/runtime_scan/pkg/scanner/job_managment_test.go
@@ -718,7 +718,7 @@ spec:
         securityContext:
           capabilities:
             drop:
-            - all
+            - ALL
           runAsNonRoot: true
           runAsGroup: 1001
           runAsUser: 1001
@@ -766,7 +766,7 @@ spec:
         securityContext:
           capabilities:
             drop:
-            - all
+            - ALL
           runAsNonRoot: true
           runAsGroup: 1001
           runAsUser: 1001
@@ -822,7 +822,7 @@ spec:
         securityContext:
           capabilities:
             drop:
-            - all
+            - ALL
           runAsNonRoot: true
           runAsGroup: 1001
           runAsUser: 1001
@@ -878,7 +878,7 @@ spec:
         securityContext:
           capabilities:
             drop:
-            - all
+            - ALL
           runAsNonRoot: true
           runAsGroup: 1001
           runAsUser: 1001
@@ -945,7 +945,7 @@ spec:
         securityContext:
           capabilities:
             drop:
-            - all
+            - ALL
           runAsNonRoot: true
           runAsGroup: 1001
           runAsUser: 1001
@@ -1003,7 +1003,7 @@ spec:
         securityContext:
           capabilities:
             drop:
-            - all
+            - ALL
           runAsNonRoot: true
           runAsGroup: 1001
           runAsUser: 1001