diff --git a/packages/apps/postgres/templates/db.yaml b/packages/apps/postgres/templates/db.yaml index de8c24f7..6c1fda12 100644 --- a/packages/apps/postgres/templates/db.yaml +++ b/packages/apps/postgres/templates/db.yaml @@ -65,7 +65,8 @@ spec: {{- /* Security: Block parameters that could allow shell command execution */ -}} {{- $dangerousParams := list "archive_command" "restore_command" "ssl_passphrase_command" "log_destination" "event_source" }} {{- range $key, $value := $params }} - {{- if has $key $dangerousParams }} + {{- $normalizedKey := lower $key }} + {{- if has $normalizedKey $dangerousParams }} {{- fail (printf "SECURITY: Parameter '%s' is blocked for security reasons. This parameter could allow arbitrary shell command execution and is managed by CloudNativePG operator." $key) }} {{- end }} {{ $key }}: {{ $value | quote }} diff --git a/packages/system/kubevirt-operator/alerts/PrometheusRule.yaml b/packages/system/kubevirt-operator/templates/prometheusrule.yaml similarity index 100% rename from packages/system/kubevirt-operator/alerts/PrometheusRule.yaml rename to packages/system/kubevirt-operator/templates/prometheusrule.yaml