kubewarden / allow-privilege-escalation-psp-policy

A Kubewarden Pod Security Policy that controls usage of allowPrivilegeEscalation
https://kubewarden.io
Apache License 2.0
6 stars 7 forks source link

Extend the policy to handle `DefaultAllowPrivilegeEscalation` #7

Closed flavio closed 2 years ago

flavio commented 2 years ago

The original Kubernetes PSP featured also a DefaultAllowPrivilegeEscalation option.

Quoting the official docs:

DefaultAllowPrivilegeEscalation - Sets the default for the allowPrivilegeEscalation option. The default behavior without this is to allow privilege escalation so as to not break setuid binaries. If that behavior is not desired, this field can be used to default to disallow, while still permitting pods to request allowPrivilegeEscalation explicitly.

We should extend this policy to handle this scenario as well.

Acceptance criteria

flavio commented 2 years ago

This is required to close https://github.com/kubewarden/policy-hub/issues/32

flavio commented 2 years ago

This is addressed starting from version 0.1.9