Fixed sample policies to include more container types

Signed-off-by: michaelkot97 <michael.kot97@gmail.com>
kyverno · Mar 22, 2024 · a31e41a · a31e41a
1 parent c1e882a
commit a31e41a
Show file tree

Hide file tree

Showing 4 changed files with 5 additions and 5 deletions.
diff --git a/other/add-default-resources/add-default-resources.yaml b/other/add-default-resources/add-default-resources.yaml
@@ -34,7 +34,7 @@ spec:
         - UPDATE
     mutate:
       foreach:
-      - list: "request.object.spec.containers[]"
+      - list: "request.object.spec.[ephemeralContainers, initContainers, containers][]"
         patchStrategicMerge:
           spec:
             containers:

diff --git a/other/allowed-base-images/allowed-base-images.yaml b/other/allowed-base-images/allowed-base-images.yaml
@@ -41,7 +41,7 @@ spec:
         This container image's base is not in the approved list or is not specified. Only pre-approved
         base images may be used. Please contact the platform team for assistance.
       foreach:
-      - list: "request.object.spec.containers"
+      - list: "request.object.spec.[ephemeralContainers, initContainers, containers][]"
         context:
         - name: imageData
           imageRegistry: 

diff --git a/psp-migration/add-apparmor/add-apparmor.yaml b/psp-migration/add-apparmor/add-apparmor.yaml
@@ -34,7 +34,7 @@ spec:
           - UPDATE
     mutate:
       foreach:
-      - list: request.object.spec.containers[]
+      - list: request.object.spec.[ephemeralContainers, initContainers, containers][]
         patchStrategicMerge:
           metadata:
             annotations:

diff --git a/psp-migration/add-capabilities/add-capabilities.yaml b/psp-migration/add-capabilities/add-capabilities.yaml
@@ -32,7 +32,7 @@ spec:
           - UPDATE
     mutate:
       foreach:
-      - list: request.object.spec.containers[]
+      - list: request.object.spec.[ephemeralContainers, initContainers, containers][]
         preconditions:
           all:
           - key: SETFCAP
@@ -42,7 +42,7 @@ spec:
           - path: /spec/containers/{{elementIndex}}/securityContext/capabilities/add/-
             op: add
             value: SETFCAP
-      - list: request.object.spec.containers[]
+      - list: request.object.spec.[ephemeralContainers, initContainers, containers][]
         preconditions:
           all:
           - key: SETUID