KFP support for pss restricted#3412

Merged

juliusvonkohout merged 24 commits into

masterfrom

copilot/move-baseline-to-security-pss

Mar 20, 2026

Commits on Mar 20, 2026

Initial plan
Copilot
committed
refactor: move PSS component and enforce restricted labels

Copilot
and
juliusvonkohout
committed
feat: enforce KFP non-root defaults and update pipeline tests

Copilot
and
juliusvonkohout
committed
feat: enforce KFP security context defaults and align v1/v2 pipeline tests

Copilot
and
juliusvonkohout
committed
refactor: switch KFP defaults to uid 100 gid 0 and apply context via transformers

Copilot
and
juliusvonkohout
committed
refactor: use uid 100 gid 0 defaults and central security context application in pipeline tests

Copilot
and
juliusvonkohout
committed
refactor: move pipeline security context override to non-upstream overlay and simplify tests

Copilot
and
juliusvonkohout
committed
docs: add v2 security-context decorator docstring

Copilot
and
juliusvonkohout
committed
refactor: move pipeline override to overlays path and rename hello world operations

Copilot
and
juliusvonkohout
committed
refactor: apply kfp v2 security context via direct decorated component

Copilot
and
juliusvonkohout
committed
fix: use top-level pipeline overlays kustomization entrypoint

Copilot
and
juliusvonkohout
committed
fix: move illegal pipeline patching to overlays root and use overlays install path

Copilot
and
juliusvonkohout
committed
Fix directory path for pipeline installation
juliusvonkohout
authored
chore: revert upstream edits and keep pipeline fix overlay-only

Copilot
and
juliusvonkohout
committed
Update pipelines_install.sh
juliusvonkohout
authored
fix: use V1SecurityContext in KFP v1 pipeline test

Copilot
and
juliusvonkohout
committed
refactor: simplify kfp v2 security context usage

Copilot
and
juliusvonkohout
committed
fix: make kfp v1 test compile with direct container security context

Copilot
and
juliusvonkohout
committed
Change security context user and group to empty
juliusvonkohout
authored
.
juliusvonkohout
committed
.
juliusvonkohout
committed
.
juliusvonkohout
committed
.
juliusvonkohout
committed
Modify defaultSecurityContextRunAsNonRoot value
juliusvonkohout
authored

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

KFP support for pss restricted#3412

KFP support for pss restricted#3412
juliusvonkohout merged 24 commits into
masterfrom
copilot/move-baseline-to-security-pss

Commits on Mar 20, 2026

Initial plan

refactor: move PSS component and enforce restricted labels

feat: enforce KFP non-root defaults and update pipeline tests

feat: enforce KFP security context defaults and align v1/v2 pipeline tests

refactor: switch KFP defaults to uid 100 gid 0 and apply context via transformers

refactor: use uid 100 gid 0 defaults and central security context application in pipeline tests

refactor: move pipeline security context override to non-upstream overlay and simplify tests

docs: add v2 security-context decorator docstring

refactor: move pipeline override to overlays path and rename hello world operations

refactor: apply kfp v2 security context via direct decorated component

fix: use top-level pipeline overlays kustomization entrypoint

fix: move illegal pipeline patching to overlays root and use overlays install path

Fix directory path for pipeline installation

chore: revert upstream edits and keep pipeline fix overlay-only

Update pipelines_install.sh

fix: use V1SecurityContext in KFP v1 pipeline test

refactor: simplify kfp v2 security context usage

fix: make kfp v1 test compile with direct container security context

Change security context user and group to empty

.

.

.

.

Modify defaultSecurityContextRunAsNonRoot value