From e7c4f1cfa7bf7139123adb42a80a1ebe3c8a0878 Mon Sep 17 00:00:00 2001 From: Alex Vulaj Date: Mon, 21 Sep 2026 14:34:54 -0400 Subject: [PATCH] ROX-34114: Whitelist GKE/EKS mount policies in DefaultPoliciesTest --- qa-tests-backend/src/test/groovy/DefaultPoliciesTest.groovy | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/qa-tests-backend/src/test/groovy/DefaultPoliciesTest.groovy b/qa-tests-backend/src/test/groovy/DefaultPoliciesTest.groovy index 5998fb1b6c6a1..7b261936537d0 100644 --- a/qa-tests-backend/src/test/groovy/DefaultPoliciesTest.groovy +++ b/qa-tests-backend/src/test/groovy/DefaultPoliciesTest.groovy @@ -83,6 +83,10 @@ class DefaultPoliciesTest extends BaseSpecification { "tunnelfront - Secure Shell Server (sshd) Execution", "tunnelfront - Docker CIS 4.7: Alert on Update Instruction", "webhookserver - Kubernetes Actions: Port Forward to Pod", + // Newer EKS ebs-csi-node DaemonSets use bidirectional mount propagation. + "ebs-csi-node - Docker CIS 5.19: Ensure mount propagation mode is not enabled", + // GKE filestore-node DaemonSets use bidirectional mount propagation. + "filestore-node - Docker CIS 5.19: Ensure mount propagation mode is not enabled", ] static final private Deployment STRUTS_DEPLOYMENT = new Deployment()