kyverno / policies

Kyverno policies for security and best practices
Apache License 2.0
333 stars 243 forks source link

Fix for issue: 1186 CEL expression is updated to support NET_RAW drop capability #1187

Closed epasham closed 3 weeks ago

epasham commented 3 weeks ago

Related Issue(s)

kyverno should allow the pod with NET_RAW drop capability. It is already fixed for non cel policy. There is another policy version created with CEL expression which needs to be updated so that the policy is consistent between cel and non cel versions

Description

pod with NET_RAW drop capability is allowed

Closes https://github.com/kyverno/policies/issues/1186

Checklist