Skip to content

Add warning when inheritable capabilities used in CRI base_runtime_spec #8364

@dmcgowan

Description

@dmcgowan

Inheritable capabilities were removed from the default spec for GHSA-c9cp-9c75-9v8c, however they can still be specified via the base runtime spec. The use of these capabilities may be valid but they may also just be the result of specs generated from the default before the change was made. Add a warning and mention this case in the config documentation.

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions