resources:
  cpuRequestsMissing: error
  cpuLimitsMissing: error
  memoryRequestsMissing: error
  memoryLimitsMissing: error
images:
  tagNotSpecified: error
  pullPolicyNotAlways: ignore
healthChecks:
  readinessProbeMissing: warning
  livenessProbeMissing: warning
networking:
  hostNetworkSet: warning
  hostPortSet: warning
security:
  hostIPCSet: error
  hostPIDSet: error
  notReadOnlyRootFileSystem: warning
  privilegeEscalationAllowed: error
  runAsRootAllowed: warning
  runAsPrivileged: error
  capabilities:
    error:
      ifAnyAdded:
        - SYS_ADMIN
        - NET_ADMIN
        - ALL
    warning:
      ifAnyAddedBeyond:
        - CHOWN
        - DAC_OVERRIDE
        - FSETID
        - FOWNER
        - MKNOD
        - NET_RAW
        - SETGID
        - SETUID
        - SETFCAP
        - SETPCAP
        - NET_BIND_SERVICE
        - SYS_CHROOT
        - KILL
        - AUDIT_WRITE