-
Notifications
You must be signed in to change notification settings - Fork 48
Description
We can't run the helm chart with the pod security standard = restricted without this error message showing up.
Error from server (Forbidden): error when creating "STDIN": pods "openbao-server-test" is forbidden: violates PodSecurity "restricted:latest": allowPrivilegeEscalation != false (container "openbao-server-test" must set securityContext.allowPrivilegeEscalation=false), unrestricted capabilities (container "openbao-server-test" must set securityContext.capabilities.drop=["ALL"]), runAsNonRoot != true (pod or container "openbao-server-test" must set securityContext.runAsNonRoot=true), seccompProfile (pod or container "openbao-server-test" must set securityContext.seccompProfile.type to "RuntimeDefault" or "Localhost")
It would be nice to be able to disable this pod or set its config such that it would pass and run within the 'restricted' standard.
helm chart version = 0.25.6