-
Task
-
Resolution: Unresolved
-
Undefined
-
None
-
None
-
None
-
Strategic Product Work
-
8
-
False
-
None
-
False
-
OCPSTRAT-487 - Pod Security Admission Integration - Restricted Enforcement
-
-
-
Auth - Sprint 249, Auth - Sprint 250
Workloads running in platform namespaces (openshift-, kube-, default) must have the required-scc annotation defined in order to pin a specific SCC (see AUTH-482) for more details. This task adds a monitor test that analyzes all such workloads and tests the existence of the "openshift.io/required-scc" annotation.
- links to