gardener / diki

Diki is a compliance checker that aims to enhance the security posture of your Kubernetes clusters.
Apache License 2.0
7 stars 8 forks source link

Reduce entered namespaces by `nsenter` #350

Closed AleksandarSavchev closed 3 weeks ago

AleksandarSavchev commented 3 weeks ago

What this PR does / why we need it: This PR reduces the entered namespaces by nsenter to only the required namespace for diki-ops pod. This is done to avoid error resulted from not having permissions to enter a specific namespace.

It has been validated that diki works with only the mount -m namespace, if other namespaces are required in the future we can add them when they are needed.

Which issue(s) this PR fixes: Fixes #

Special notes for your reviewer:

Release note:

NONE