mirror of
https://github.com/kubescape/kubescape.git
synced 2026-04-15 06:58:11 +00:00
19 lines
396 B
YAML
19 lines
396 B
YAML
# Fix to Apply:
|
|
# select(di==0).spec.containers[0].securityContext.capabilities.drop[0] |= "SYS_ADM"
|
|
# select(di==0).spec.containers[0].securityContext.capabilities.add[0] |= "NET_RAW"
|
|
|
|
|
|
apiVersion: v1
|
|
kind: Pod
|
|
metadata:
|
|
name: insert_list
|
|
spec:
|
|
containers:
|
|
- name: nginx1
|
|
securityContext:
|
|
capabilities:
|
|
drop:
|
|
- "NET_RAW"
|
|
add: ["SYS_ADM"]
|
|
image: nginx
|