Remove `would violate PodSecurity "restricted:latest"` warnings
PaaS and framework that replace or compete with AWS, VMware
Brought to you by:
cozystack
Menu
▾
▴
#1 Remove `would violate PodSecurity "restricted:latest"` warnings
Originally created by: kvaps
We have to refactor all our apps to avoid such warnings:
Warning: would violate PodSecurity "restricted:latest": host namespaces (hostNetwork=true), allowPrivilegeEscalation != false (containers "cozystack", "darkhttpd" must set securityContext.allowPrivilegeEscalation=false), unrestricted capabilities (containers "cozystack", "darkhttpd" must set securityContext.capabilities.drop=["ALL"]), runAsNonRoot != true (pod or containers "cozystack", "darkhttpd" must set securityContext.runAsNonRoot=true), seccompProfile (pod or containers "cozystack", "darkhttpd" must set securityContext.seccompProfile.type to "RuntimeDefault" or "Localhost")
Originally posted by: themoriarti
@kvaps How to reproduce this problem or how it occurs, where to look? If there is any evidence, it will be possible to investigate.