fix pols for 1.18

2026-05-14 18:55:39 +07:00
parent 5578400e7f
commit ffa61ab646
19 changed files with 266 additions and 180 deletions
@@ -25,14 +25,14 @@ spec:
        namespaces:
        - kube-system
    validate:
-      message: >-
-        Контейнер '{{ element.name }}' не сбрасывает все capabilities.
-        Добавьте в securityContext:
-          capabilities:
-            drop:
-            - ALL
      foreach:
-      - list: "request.object.spec.containers"
+      - list: >-
+          request.object.spec.containers[] |
+          merge(request.object.spec.initContainers[] || `[]`, @) |
+          merge(request.object.spec.ephemeralContainers[] || `[]`, @)
+        message: >-
+          Контейнер '{{ element.name }}' не сбрасывает все capabilities.
+          Добавьте securityContext.capabilities.drop: [ALL].
        deny:
          conditions:
            all: