processing each container types separately

Signed-off-by: Jaydip Gabani <[email protected]>
open-policy-agent · Aug 7, 2024 · dbba915 · dbba915
1 parent 3446780
commit dbba915
Show file tree

Hide file tree

Showing 7 changed files with 1,311 additions and 149 deletions.
diff --git a/artifacthub/library/pod-security-policy/users/1.1.0/artifacthub-pkg.yml b/artifacthub/library/pod-security-policy/users/1.1.0/artifacthub-pkg.yml
@@ -3,7 +3,7 @@ name: k8spspallowedusers
 displayName: Allowed Users
 createdAt: "2024-05-30T00:06:50Z"
 description: Controls the user and group IDs of the container and some volumes. Corresponds to the `runAsUser`, `runAsGroup`, `supplementalGroups`, and `fsGroup` fields in a PodSecurityPolicy. For more information, see https://kubernetes.io/docs/concepts/policy/pod-security-policy/#users-and-groups
-digest: 1a2443f09b2e751b9055bfb94f8874274b79a12d1947476348de5103e7c25324
+digest: b70711f62a3207d1cb7c374416567bc9d9fee374bbc1fa356bbd13ab9a192daf
 license: Apache-2.0
 homeURL: https://open-policy-agent.github.io/gatekeeper-library/website/users
 keywords:

diff --git a/...-security-policy/users/1.1.0/samples/psp-pods-allowed-user-ranges/example_disallowed.yaml b/...-security-policy/users/1.1.0/samples/psp-pods-allowed-user-ranges/example_disallowed.yaml
@@ -15,3 +15,9 @@ spec:
       securityContext:
         runAsUser: 250
         runAsGroup: 250
+  initContainers:
+    - name: nginx
+      image: nginx
+      securityContext:
+        runAsUser: 250
+        runAsGroup: 250
diff --git a/artifacthub/library/pod-security-policy/users/1.1.0/template.yaml b/artifacthub/library/pod-security-policy/users/1.1.0/template.yaml
diff --git a/...ry/pod-security-policy/users/samples/psp-pods-allowed-user-ranges/example_disallowed.yaml b/...ry/pod-security-policy/users/samples/psp-pods-allowed-user-ranges/example_disallowed.yaml
@@ -15,3 +15,9 @@ spec:
       securityContext:
         runAsUser: 250
         runAsGroup: 250
+  initContainers:
+    - name: nginx
+      image: nginx
+      securityContext:
+        runAsUser: 250
+        runAsGroup: 250
diff --git a/library/pod-security-policy/users/template.yaml b/library/pod-security-policy/users/template.yaml
diff --git a/src/pod-security-policy/users/src.cel b/src/pod-security-policy/users/src.cel
diff --git a/website/docs/validation/users.md b/website/docs/validation/users.md