Fix pss for hostNetwork (#147)

* Fix PSS to allow using hostNetwork in agents. * Fix PSS to allow using hostNetwork in agents.
giantswarm · Jan 16, 2024 · 78ed5af · 78ed5af
1 parent ed4debf
commit 78ed5af
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 0 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -7,6 +7,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Fixed
+
+- Fix PSS to allow using hostNetwork in agents.
+
 ## [1.2.2] - 2023-12-21
 
 # Changed

diff --git a/helm/aws-efs-csi-driver/templates/pss-exceptions-node.yaml b/helm/aws-efs-csi-driver/templates/pss-exceptions-node.yaml
@@ -40,6 +40,12 @@ spec:
         - adding-capabilities-strict
         - autogen-require-drop-all
         - autogen-adding-capabilities-strict
+    - policyName: disallow-host-namespaces
+      ruleNames:
+        - autogen-host-namespaces
+    - policyName: disallow-host-ports
+      ruleNames:
+        - autogen-host-ports-none
   match:
     any:
       - resources: