kyverno should allow the pod with NET_RAW drop capability. It is already fixed for non cel policy.
There is another policy version created with CEL expression which needs to be updated so that the policy is consistent between cel and non cel versions
Related Issue(s)
kyverno should allow the pod with NET_RAW drop capability. It is already fixed for non cel policy. There is another policy version created with CEL expression which needs to be updated so that the policy is consistent between cel and non cel versions
Description
pod with NET_RAW drop capability is allowed
Closes https://github.com/kyverno/policies/issues/1186
Checklist