Skip to content

issues Search Results · repo:kubernetes/pod-security-admission language:Go

Filter by

7 results
 (86 ms)

7 results

inkubernetes/pod-security-admission (press backspace or delete to remove)

kubernetes/pod-security-admission
Question, possible privilege escalation issue.

Hi, if a user has permissions to edit their own namespace this creates the possibility to override the PSA policy (e.g. set it to privileged) for that namespace. Can we block this at the cluster level ...
  • andrewcorr
  • 7
  • Opened 
    on Nov 27, 2024
  • #14

kubernetes/pod-security-admission
Should the webhook's image be updated?

At the time of writing the webhook s image was updated 2 years ago by https://github.com/kubernetes/pod-security-admission/commit/7339f2432c1095924ffbcfa63181ee5cfb87ce63 to 1.25.0. Have there been no ...
  • mamachanko
  • 3
  • Opened 
    on Sep 27, 2024
  • #13

kubernetes/pod-security-admission
automountServiceAccountToken to false?

I am not deeply familiar with the scope of the pod security admission policies. However, it seems that setting automountServiceAccountToken to true (the default) on a pod spec can allow a pod to escalate ...
lifecycle/rotten
  • samc1213
  • 5
  • Opened 
    on Aug 1, 2024
  • #12

kubernetes/pod-security-admission
Behaviour of drop capabilities using ALL

Quick question, if we want to set the ALL entry for the capabilities.drop , is there a difference on using ALL vs all . On PSP definitions, we use to set all, but it seems PSA is opinionated on allowing ...
  • qu1queee
  • 2
  • Opened 
    on Jul 4, 2023
  • #11

kubernetes/pod-security-admission
PSA Warning not generated if deployments is changed by kubectl scale command

On editing the deployment to change the replicas count for the deployment we observe as expected PSA warning message. As can be seen below. root [ ~ ]# kubectl edit deploy nginx-lb-5 -n tkc-lb Warning: ...
  • abhijit-dev82
  • 2
  • Opened 
    on Jun 16, 2023
  • #10

kubernetes/pod-security-admission
I can't set PSA label on namespace

I don t know whether I can open issue with this .. I create one namespace psans with kuberctl create ns psans . Then, I can see follow labes [root@bastion /]# kubectl describe ns psans | grep secu pod-security.kubernetes.io/audit=baseline ...
triage/needs-information
  • JayJay-K
  • 11
  • Opened 
    on Jun 9, 2023
  • #9

kubernetes/pod-security-admission
policy/v1beta1 PodSecurityPolicy is deprecated in v1.21+, unavailable in v1.25+

We are maintaining two one for default name space pod_security_policy.yaml and one for istio pod_security_policy-istio.yaml,so as per the warring , PodSecurityPolicy will not be available in v1.25+ Could ...
  • yugandhar-btc
  • 3
  • Opened 
    on Jun 1, 2022
  • #5
Issue origami icon

Learn how you can use GitHub Issues to plan and track your work.

Save views for sprints, backlogs, teams, or releases. Rank, sort, and filter issues to suit the occasion. The possibilities are endless.Learn more about GitHub Issues
ProTip! 
Press the
/
key to activate the search input again and adjust your query.
Issue origami icon

Learn how you can use GitHub Issues to plan and track your work.

Save views for sprints, backlogs, teams, or releases. Rank, sort, and filter issues to suit the occasion. The possibilities are endless.Learn more about GitHub Issues
ProTip! 
Press the
/
key to activate the search input again and adjust your query.
Issue search results · GitHub