Remove hostPorts from unprivileged psp (#1040)

hostPorts by definition require to use hostNetwork so having them allowed in the psp where hostNetwork is forbidden is not correct. Signed-off-by: lcavajani <[email protected]>
SUSE · May 7, 2020 · dcb5292 · dcb5292
1 parent 6a9e489
commit dcb5292
Show file tree

Hide file tree

Showing 2 changed files with 1 addition and 4 deletions.
diff --git a/internal/pkg/skuba/addons/psp.go b/internal/pkg/skuba/addons/psp.go
@@ -300,9 +300,6 @@ spec:
   hostPID: false
   hostIPC: false
   hostNetwork: false
-  hostPorts:
-  - min: 0
-    max: 65535
   # SELinux
   seLinux:
     # SELinux is unused in CaaSP

diff --git a/internal/pkg/skuba/kubernetes/versions.go b/internal/pkg/skuba/kubernetes/versions.go
@@ -106,7 +106,7 @@ var (
 				Dex:           &AddonVersion{"2.16.0", 6},
 				Gangway:       &AddonVersion{"3.1.0-rev4", 5},
 				MetricsServer: &AddonVersion{"0.3.6", 1},
-				PSP:           &AddonVersion{"", 3},
+				PSP:           &AddonVersion{"", 4},
 			},
 		},
 		"1.16.2": KubernetesVersion{