Skip to content
This repository has been archived by the owner on May 16, 2023. It is now read-only.

[logstash] disable privileged container in psp #1000

Merged
merged 3 commits into from
Jan 5, 2021
Merged

[logstash] disable privileged container in psp #1000

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
b4a1c86
[logstash] disable privileged container in psp
jmlrt Dec 23, 2020
04933a5
Merge remote-tracking branch 'origin/master' into logstash-psp-privil…
jmlrt Jan 5, 2021
7c196d6
fix test
jmlrt Jan 5, 2021
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion logstash/tests/logstash_test.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -789,7 +789,7 @@ def test_pod_security_policy():
r["statefulset"][name]["spec"]["template"]["spec"]["serviceAccountName"] == name
)
psp_spec = r["podsecuritypolicy"][name]["spec"]
assert psp_spec["privileged"] is True
assert psp_spec["privileged"] is False


def test_external_pod_security_policy():
Expand Down
2 changes: 1 addition & 1 deletion logstash/values.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -104,7 +104,7 @@ podSecurityPolicy:
create: false
name: ""
spec:
privileged: true
privileged: false
fsGroup:
rule: RunAsAny
runAsUser:
Expand Down