Environment
- Carbon Black Cloud: Container Advanced Version 1.23 and Lower
- Tanzu Kubernetes clusters
Symptoms
Applying exclusions to the Hardening Policy rules in the Carbon Black Cloud console do not take effect, and can prevent Tanzu upgrades and node refresh actions.
Cause
The data collected from Kubernetes clusters when running the `kubectl port-forward' command contains only the pod name and the ports that were used and the same goes for the "Exec to container' rule.
Resolution
Create exceptions to Hardening Policy rules based on the Resource name instead of Label.
Example: "Resource starts with etcd"
