• Kubernetes Submit Queue's avatar
    Merge pull request #56839 from hzxuzhonghu/exec-admission · 45a069a2
    Kubernetes Submit Queue authored
    Automatic merge from submit-queue (batch tested with PRs 57746, 57621, 56839, 57464). If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.
    
     check pod securityContext hostNetwork in exec admission controller
    
    **What this PR does / why we need it**:
    currently only hostIPC hostPID are checked in DenyEscalatingExec admission controller,
    hostNetwork should also be checked to deny exec /attach
    **Which issue(s) this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close the issue(s) when PR gets merged)*:
    Fixes #56838
    
    **Special notes for your reviewer**:
    
    **Release note**:
    
    ```release-note
    check psp HostNetwork in DenyEscalatingExec admission controller.
    ```
    45a069a2
Name
Last commit
Last update
..
BUILD Loading commit data...
admission.go Loading commit data...
admission_test.go Loading commit data...