Skip to content

Commit

Permalink
OCPBUGS-17828 Improve ocp4-cis-scc-limit-container-allowed-capabiliti…
Browse files Browse the repository at this point in the history
…es instructions

Update the ocil so the instruction for rule ocp4-cis-scc-limit-container-allowed-capabilities is correctly rendered
  • Loading branch information
Vincent056 committed Jun 17, 2024
1 parent 3363a2e commit fafd758
Showing 1 changed file with 3 additions and 3 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -25,10 +25,10 @@ description: |-
spec:
description: Allows an additional scc
setValues:
- name: upstream-ocp4-var-sccs-with-allowed-capabilities-regex
- name: ocp4-var-sccs-with-allowed-capabilities-regex
rationale: Allow our own custom SCC
value: ^privileged$|^hostnetwork-v2$|^restricted-v2$|^nonroot-v2$|^additional$
extends: upstream-ocp4-cis
extends: ocp4-cis
title: Modified CIS allowing one more SCC
</pre>
<p>
Expand Down Expand Up @@ -65,7 +65,7 @@ ocil: |-
check the variable value, e.g:
<pre>$ oc get variable ocp4-var-sccs-with-allowed-capabilities-regex -ojsonpath='{.value}' </pre>
Then use following command to list the SCCs that would fail the test:
<pre>$ oc get scc -o json | jq '{{{ jqfilter }}}'</pre>
<tt>{{{ ocil_oc_pipe_jq_filter('scc', networkpolicies_for_non_ctlplane_namespaces_filter) }}}</tt>
Please replace the regular expression in the test command with the value read from the variable
<pre>ocp4-var-sccs-with-allowed-capabilities-regex</pre>. You can read the variable
value with:
Expand Down

0 comments on commit fafd758

Please sign in to comment.