allow containers.privileged

knative · Dec 30, 2024 · 9f09651 · 9f09651
1 parent 58923e7
commit 9f09651
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/cmd/schema-tweak/overrides.go b/cmd/schema-tweak/overrides.go
@@ -135,12 +135,16 @@ func revSpecOverrides(prefixPath string) []entry {
 		allowedFields: sets.New(
 			"allowPrivilegeEscalation",
 			"capabilities",
+			"privileged",
 			"readOnlyRootFilesystem",
 			"runAsGroup",
 			"runAsNonRoot",
 			"runAsUser",
 			"seccompProfile",
 		),
+	}, {
+		path:        "containers.securityContext.privileged",
+		description: "Run container in privileged mode. This can only be set to explicitly to 'false'",
 	}, {
 		path: "containers.securityContext.capabilities",
 		allowedFields: sets.New(