mirror of
https://github.com/FairwindsOps/polaris.git
synced 2026-05-10 19:26:46 +00:00
move more security checks to jsonschema
This commit is contained in:
18
checks/notReadOnlyRootFileSystem.yaml
Normal file
18
checks/notReadOnlyRootFileSystem.yaml
Normal file
@@ -0,0 +1,18 @@
|
||||
name: NotReadOnlyRootFileSystem
|
||||
id: notReadOnlyRootFileSystem
|
||||
successMessage: Filesystem is read only
|
||||
failureMessage: Filesystem should be read only
|
||||
category: Security
|
||||
target: Container
|
||||
schema:
|
||||
'$schema': http://json-schema.org/draft-07/schema
|
||||
type: object
|
||||
required:
|
||||
- securityContext
|
||||
properties:
|
||||
securityContext:
|
||||
required:
|
||||
- readOnlyRootFilesystem
|
||||
properties:
|
||||
readOnlyRootFilesystem:
|
||||
const: true
|
||||
Reference in New Issue
Block a user