[release-4.11] Bug 2113019: Update pod YAML sample for restricted pod security admission policy

[openshift-cherrypick-robot]

This is an automated cherry-pick of #11894

/assign rhamilto

[openshift-ci[bot]]

@openshift-cherrypick-robot: Bugzilla bug 2112146 has been cloned as Bugzilla bug 2113019. Retitling PR to link against new bug. /retitle [release-4.11] Bug 2113019: Update pod YAML sample for restricted pod security admission policy

In response to this:

[release-4.11] Bug 2112146: Update pod YAML sample for restricted pod security admission policy

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

[openshift-ci[bot]]

@openshift-cherrypick-robot: This pull request references Bugzilla bug 2113019, which is valid. The bug has been moved to the POST state. The bug has been updated to refer to the pull request using the external bug tracker.

6 validation(s) were run on this bug

• bug is open, matching expected state (open)
• bug target release (4.11.0) matches configured target release for branch (4.11.0)
• bug is in the state NEW, which is one of the valid states (NEW, ASSIGNED, ON_DEV, POST, POST)
• dependent bug Bugzilla bug 2112146 is in the state ON_QA, which is one of the valid states (MODIFIED, ON_QA, VERIFIED)
• dependent Bugzilla bug 2112146 targets the "4.12.0" release, which is one of the valid target releases: 4.12.0
• bug has dependents

No GitHub users were found matching the public email listed for the QA contact in Bugzilla ([email protected]), skipping review request.

In response to this:

[release-4.11] Bug 2113019: Update pod YAML sample for restricted pod security admission policy

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

[rhamilto]

/approve /lgtm

[openshift-ci[bot]]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: openshift-cherrypick-robot, rhamilto

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• ~~frontend/OWNERS~~ [rhamilto]

Approvers can indicate their approval by writing /approve in a comment Approvers can cancel approval by writing /approve cancel in a comment

[christoph-jerolimov]

/retest

[xdotli]

/label qe-approved This bug has been verified on 4.11.0-0.nightly, openshift/console#11916

Steps to reproduce:

1. Go to /k8s/all-namespaces/pods
2. Click Create Pod that redirects to /k8s/cluster/pods/~new
3. The template YAML file should be consistent with the template string in this commit:
4. CI all passed https://prow.ci.openshift.org/view/gs/origin-ci-test/pr-logs/pull/openshift_console/11916/pull-ci-openshift-console-release-4.11-e2e-gcp-console/1555334632713490432. Previously failed cases not found related to the bug.

apiVersion: v1
kind: Pod
metadata:
  name: example
  labels:
    app: httpd
spec:
  securityContext:
    runAsNonRoot: true
    seccompProfile:
      type: RuntimeDefault
  containers:
    - name: httpd
      image: image-registry.openshift-image-registry.svc:5000/openshift/httpd:latest
      ports:
        - containerPort: 8080
      securityContext:
        allowPrivilegeEscalation: false
        capabilities:
          drop:
          - ALL

[rhamilto]

/backport-risk-assessed

[yapei]

/label cherry-pick-approved

[openshift-ci-robot]

/retest-required

Remaining retests: 2 against base HEAD 6b10e5ba4e5c82854f86b37dadca488c718d8257 and 8 for PR HEAD 62bae87fb43b4362fae70972e1d6bbff7725ab49 in total

[openshift-ci-robot]

/retest-required

Remaining retests: 1 against base HEAD 6b10e5ba4e5c82854f86b37dadca488c718d8257 and 7 for PR HEAD 62bae87fb43b4362fae70972e1d6bbff7725ab49 in total

[openshift-ci-robot]

/retest-required

Remaining retests: 0 against base HEAD 6b10e5ba4e5c82854f86b37dadca488c718d8257 and 6 for PR HEAD 62bae87fb43b4362fae70972e1d6bbff7725ab49 in total

[rhamilto]

/retest

[rhamilto]

/retest

[rhamilto]

/retest

[openshift-ci-robot]

/retest-required

Remaining retests: 2 against base HEAD 8910ddc3b1a26800d4c48eec2530989ddd7e7e7e and 5 for PR HEAD 62bae87fb43b4362fae70972e1d6bbff7725ab49 in total

[openshift-ci[bot]]

@openshift-cherrypick-robot: all tests passed!

Full PR test history. Your PR dashboard.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here.

[openshift-ci[bot]]

@openshift-cherrypick-robot: All pull requests linked via external trackers have merged:

• openshift/console#11916

Bugzilla bug 2113019 has been moved to the MODIFIED state.

In response to this:

[release-4.11] Bug 2113019: Update pod YAML sample for restricted pod security admission policy

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.