fix pols for 1.18

2026-05-14 18:55:39 +07:00
parent 5578400e7f
commit ffa61ab646
19 changed files with 266 additions and 180 deletions
@@ -45,11 +45,11 @@ spec:
        namespaces:
        - kube-system
    validate:
-      message: >-
-        Контейнер '{{ element.name }}' использует runAsUser: 0 (root).
-        Установите runAsUser >= 1000.
      foreach:
-      - list: "request.object.spec.containers"
+      - list: >-
+          request.object.spec.containers[] |
+          merge(request.object.spec.initContainers[] || `[]`, @)
+        message: "Контейнер '{{ element.name }}' использует runAsUser: 0 (root). Установите runAsUser >= 1000."
        deny:
          conditions:
            any: