Chris Farhood
a569047275
LinuxServer.io containers need to run init scripts with elevated permissions before dropping to the specified PUID/PGID. Reverted to: - Remove restrictive securityContext settings - Use PUID/PGID environment variables (LinuxServer standard) - Add Polaris exemptions for runAsRoot and runAsPrivileged - Add Checkov exemption for high UID requirement This fixes container startup issues introduced by security hardening. Generated with [Claude Code](https://claude.ai/code) via [Happy](https://happy.engineering) Co-Authored-By: Claude <noreply@anthropic.com> Co-Authored-By: Happy <yesreply@happy.engineering>
12 lines
422 B
YAML
12 lines
422 B
YAML
soft-fail: false
|
|
quiet: true
|
|
compact: true
|
|
framework:
|
|
- all
|
|
skip-check:
|
|
- CKV_K8S_21 # Default namespace usage
|
|
- CKV_K8S_43 # Image tag validation (using latest tags intentionally)
|
|
- CKV_K8S_14 # Image tag should be fixed (same as above)
|
|
- CKV_K8S_22 # Read-only filesystem (IRC apps need to write to volumes)
|
|
- CKV_K8S_40 # Containers should run as high UID (ZNC LinuxServer container needs flexibility)
|