#2938 Change argument to uppercase for compatibility with other tools

Reet00 · J12934 · commit a343e4bbd10e · 2025-07-09T12:47:01.000+02:00
Signed-off-by: Samreet Singh &lt;samreet.singh@iteratec.com&gt;
diff --git a/operator/controllers/execution/scans/hook_reconciler.go b/operator/controllers/execution/scans/hook_reconciler.go
@@ -388,7 +388,7 @@ func generateJobForHook(hookName string, hookSpec *executionv1.ScanCompletionHoo
 								ReadOnlyRootFilesystem:   &truePointer,
 								Privileged:               &falsePointer,
 								Capabilities: &corev1.Capabilities{
-									Drop: []corev1.Capability{"all"},
+									Drop: []corev1.Capability{"ALL"},
 								},
 							},
 						},
diff --git a/operator/controllers/execution/scans/parse_reconciler.go b/operator/controllers/execution/scans/parse_reconciler.go
@@ -191,7 +191,7 @@ func (r *ScanReconciler) startParser(scan *executionv1.Scan) error {
 								ReadOnlyRootFilesystem:   &truePointer,
 								Privileged:               &falsePointer,
 								Capabilities: &corev1.Capabilities{
-									Drop: []corev1.Capability{"all"},
+									Drop: []corev1.Capability{"ALL"},
 								},
 							},
 						},
diff --git a/operator/controllers/execution/scans/scan_reconciler.go b/operator/controllers/execution/scans/scan_reconciler.go
@@ -336,7 +336,7 @@ func (r *ScanReconciler) constructJobForScan(scan *executionv1.Scan, scanTypeSpe
 			ReadOnlyRootFilesystem:   &truePointer,
 			Privileged:               &falsePointer,
 			Capabilities: &corev1.Capabilities{
-				Drop: []corev1.Capability{"all"},
+				Drop: []corev1.Capability{"ALL"},
 			},
 		},
 	}
diff --git a/operator/tests/__snapshot__/operator_test.yaml.snap b/operator/tests/__snapshot__/operator_test.yaml.snap
@@ -111,7 +111,7 @@ matches the snapshot:
                 allowPrivilegeEscalation: false
                 capabilities:
                   drop:
-                    - all
+                    - ALL
                 privileged: false
                 readOnlyRootFilesystem: true
                 runAsNonRoot: true
@@ -688,7 +688,7 @@ properly-renders-the-service-monitor-when-enabled:
                 allowPrivilegeEscalation: false
                 capabilities:
                   drop:
-                    - all
+                    - ALL
                 privileged: false
                 readOnlyRootFilesystem: true
                 runAsNonRoot: true
diff --git a/operator/values.yaml b/operator/values.yaml
@@ -50,7 +50,7 @@ securityContext:
   capabilities:
     drop:
       # securityContext.capabilities.drop[0] -- This drops all linux privileges from the operator container. They are not required
-      - all
+      - ALL
 
 # -- Sets the securityContext on the operators pod level. See: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-container
 podSecurityContext: {}

Original file line number	Diff line number	Diff line change
`@@ -336,7 +336,7 @@ func (r ScanReconciler) constructJobForScan(scan executionv1.Scan, scanTypeSpe`
`336`	`336`	`ReadOnlyRootFilesystem: &truePointer,`
`337`	`337`	`Privileged: &falsePointer,`
`338`	`338`	`Capabilities: &corev1.Capabilities{`
`339`		`- Drop: []corev1.Capability{"all"},`
	`339`	`+ Drop: []corev1.Capability{"ALL"},`
`340`	`340`	`},`
`341`	`341`	`},`
`342`	`342`	`}`