mirror of
https://github.com/kubernetes/kubernetes.git
synced 2026-03-15 07:02:59 -04:00
45a069a241
Automatic merge from submit-queue (batch tested with PRs 57746, 57621, 56839, 57464). If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>. check pod securityContext hostNetwork in exec admission controller **What this PR does / why we need it**: currently only hostIPC hostPID are checked in DenyEscalatingExec admission controller, hostNetwork should also be checked to deny exec /attach **Which issue(s) this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close the issue(s) when PR gets merged)*: Fixes #56838 **Special notes for your reviewer**: **Release note**: ```release-note check psp HostNetwork in DenyEscalatingExec admission controller. ``` |
||
|---|---|---|
| .. | ||
| admit | ||
| alwayspullimages | ||
| antiaffinity | ||
| defaulttolerationseconds | ||
| deny | ||
| eventratelimit | ||
| exec | ||
| extendedresourcetoleration | ||
| gc | ||
| imagepolicy | ||
| initialresources | ||
| limitranger | ||
| namespace | ||
| noderestriction | ||
| persistentvolume | ||
| persistentvolumeclaim/pvcprotection | ||
| podnodeselector | ||
| podpreset | ||
| podtolerationrestriction | ||
| priority | ||
| resourcequota | ||
| security | ||
| securitycontext/scdeny | ||
| serviceaccount | ||
| storageclass/setdefault | ||
| OWNERS | ||