16 Commits

Author	SHA1	Message	Date
Robert Brennan	ac501a20d2	add sample output	2020-01-14 14:50:34 +00:00
Robert Brennan	6b4227da4d	fix config-full.yaml	2020-01-13 16:01:36 +00:00
Robert Brennan	4d82220212	fix up config-full	2020-01-02 19:26:03 +00:00
Robert Brennan	04da47d83e	change input config to simplify things	2020-01-02 17:55:21 +00:00
Robert Brennan	5efa416ea9	implement custom checks, implement resource ranges as custom check	2020-01-02 17:55:21 +00:00
Robert Brennan	7b0fe81d01	implement capabilities checks in JSON schema	2020-01-02 17:55:21 +00:00
Robert Brennan	67ab987f7e	Add support for annotation-based exemptions (#227) ... * add controllers_to_scan to example config-full * add support for annotation-based exemptions * fix lint errors * add docs	2019-12-06 08:29:30 -05:00
Andrew Suderman	1159a380ba	Adding an exception for flannel being privileged to example config (#225)	2019-11-22 12:02:35 -07:00
Robert Brennan	ca6aa76729	Add default exemptions (#220) ... * Update config.yaml * Update config.yaml * add a couple more exemptions	2019-11-15 14:45:58 -05:00
MAKOSCAFEE	fc7c913122	update exemption rules and check controller name prefix	2019-11-07 19:16:06 +02:00
MAKOSCAFEE	3e15586597	add kind exception configurations	2019-11-07 15:37:13 +02:00
Robert Brennan	2b15f11d57	Add exemptions to config (#204) ... * first pass at adding exemptions * Update config.yaml * make config_test more reliable * add flag to disallow exemptions in dashboard * add disallow-exemptions flag to CLI * add comments * fix exemptions flag * fix alert on dashboard * minor style changes	2019-10-23 17:14:03 -04:00
Nick Huanca	75f70352ba	Additional Pod Controller Scans (#166) ... **Changes** - Refactored the way controllers work to be an interface - Added configurable controllers to include in scans - Added daemonsets, jobs and cronjobs in scans - Added `ReplicationController` type controllers to the supported list - Adjusted logic for failed YAML parsing to bubble up errors - Added better logic for calculating summaries on cluster wide results - Relocated responsibilities for counting types into validators vs spreading it around more packages - Fixed bug where cronjob parsing was using wrong KIND - Added fixtures for mocking new controller types - Added example yamls to test scanning files - Added functions to NamespacedResult(s) to reduce code complexity deep set iterations - Refactored how results get added to namespacedresults so adding more later is easier - Minor signature changes for interface implementing structs for controllers	2019-07-31 15:56:27 -06:00
Bobby Brennan	79f3d2cb74	use packr for config.yaml	2019-05-17 14:34:53 +00:00
Rob Scott	0f81f5a93d	Adding goreleaser support	2019-05-16 11:21:47 -04:00
Rob Scott	c019364958	much more granular rbac permissions, splitting up dashboard and webhook components to allow for that	2019-05-16 10:00:21 -04:00