Merge pull request #110 from nirmata/NDEV-17894

NDEV-17894: correct mutate resource for disallow-previliged containers
nirmata · Feb 6, 2024 · dc52ca3 · dc52ca3
2 parents 2690477 + 0165e2a
commit dc52ca3
Showing 1 changed file with 4 additions and 4 deletions.
diff --git a/...ity/baseline/disallow-privileged-containers/remediate-disallow-privileged-containers.yaml b/...ity/baseline/disallow-privileged-containers/remediate-disallow-privileged-containers.yaml
@@ -20,12 +20,12 @@ spec:
                 - Job
                 - DaemonSet
       mutate:
-        foreach: 
+        foreach:
           - list: request.object.spec.template.spec.containers[]
             order: Descending
             preconditions:
               all:
-              - key: "{{ element.securityContext && element.securityContext.privileged }}"
+              - key: "{{ element.securityContext && element.securityContext.privileged || 'false' }}"
                 operator: Equals
                 value: true
             patchesJson6902: |-
@@ -36,7 +36,7 @@ spec:
             order: Descending
             preconditions:
               all:
-              - key: "{{ element.securityContext && element.securityContext.privileged }}"
+              - key: "{{ element.securityContext && element.securityContext.privileged || 'false'  }}"
                 operator: Equals
                 value: true
             patchesJson6902: |-
@@ -47,7 +47,7 @@ spec:
             order: Descending
             preconditions:
               all:
-              - key: "{{ element.securityContext && element.securityContext.privileged }}"
+              - key: "{{ element.securityContext && element.securityContext.privileged || 'false'  }}"
                 operator: Equals
                 value: true
             patchesJson6902: |-