fix rule names of policy exception (#560)

* fix rule names of policy exception * update nancy-ignore
giantswarm · Aug 3, 2023 · 8cb2903 · 8cb2903
1 parent a3f3704
commit 8cb2903
Show file tree

Hide file tree

Showing 3 changed files with 9 additions and 3 deletions.
diff --git a/.nancy-ignore b/.nancy-ignore
@@ -18,4 +18,4 @@ CVE-2023-26125
 CVE-2023-29401
 
 # golang/google.golang.org/[email protected]
-CVE-2023-32731 until=2023-07-30
+CVE-2023-32731 until=2023-08-30
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -7,6 +7,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Fixed
+
+- Fix rule names of PolicyException.
+
 ## [3.2.0] - 2023-07-17
 
 ### Fixed

diff --git a/helm/cert-operator/templates/pss-exceptions.yaml b/helm/cert-operator/templates/pss-exceptions.yaml
@@ -15,8 +15,10 @@ spec:
  - autogen-host-path
  - policyName: disallow-capabilities-strict
  ruleNames:
- - disallow-capabilities
- - autogen-disallow-capabilities
+ - adding-capabilities-strict
+ - autogen-adding-capabilities-strict
+ - require-drop-all
+ - autogen-require-drop-all
  - policyName: disallow-privilege-escalation
  ruleNames:
  - privilege-escalation