Skip to content

Pod Security Admission warnings #192

Open
@mrclrchtr

Description

When I deploy connect with helm, I get the following warnings with Pod Security Admission enabled:

Warning: would violate PodSecurity "restricted:latest": unrestricted capabilities (containers "connect-api", "connect-sync" must set securityContext.capabilities.drop=["ALL"]), runAsNonRoot != true (pod or containers "connect-api", "connect-sync" must set securityContext.runAsNonRoot=true), seccompProfile (pod or containers "connect-api", "connect-sync" must set securityContext.seccompProfile.type to "RuntimeDefault" or "Localhost")

Warning: would violate PodSecurity "restricted:latest": allowPrivilegeEscalation != false (container "curl" must set securityContext.allowPrivilegeEscalation=false), unrestricted capabilities (container "curl" must set securityContext.capabilities.drop=["ALL"]), runAsNonRoot != true (pod or container "curl" must set securityContext.runAsNonRoot=true), seccompProfile (pod or container "curl" must set securityContext.seccompProfile.type to "RuntimeDefault" or "Localhost")

It would be very good to fix these security warnings.

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions