search

rhpds / bookbag-rosa-mobb

Bookbag repository for MOBB ROSA labs
Apache License 2.0
3 stars 13 forks source link

warnings about "Warning: would violate PodSecurity "restricted:v1.24" #9 #12

Open augustrh opened 10 months ago

augustrh commented 10 months ago

When deploying some apps the following warning appears. 

Warning: would violate PodSecurity "restricted:v1.24": allowPrivilegeEscalation != false (container "work" must set security
Context.allowPrivilegeEscalation=false), unrestricted capabilities (container "work" must set securityContext.capabilities.d
rop=["ALL"]), runAsNonRoot != true (pod or container "work" must set securityContext.runAsNonRoot=true), seccompProfile (pod
 or container "work" must set securityContext.seccompProfile.type to "RuntimeDefault" or "Localhost")

It appears the workaround is here: https://access.redhat.com/solutions/7002730 and it is possible to avoid the warning. Functionality is not affected but raising for awareness.

wkulhanek commented 10 months ago

Probably a function of using 4.13. I don't see that in 4.14

augustrh commented 10 months ago

According to the KB it's 4.11+ which aligns with the 1.24 note in the error. It's not hurting anything just thought it looked ugly. Means the deployment code for many steps needs updating and might not be worth the time.