mirror of
https://github.com/FairwindsOps/polaris.git
synced 2026-08-23 22:26:34 +00:00
jdesouza
2b17c31957
* Bump lins * Code refactoring * Fixign issues * Fixing issues * Fixing issues * Fixing issues * [WIP] * [WIP] * [WIP] * Trying to fix tests * Trying to fix tests * Fixing issues * Fixing issues * Fixing issues * Fixing issues * Fixing issues * Fixing issues * Revert go mod * Revert go mod * Revert go mod * Revert go mod * Fixing issues * Fixing issue * Code refactoring * Updating json schema version * Updating json schema version
32 lines
825 B
YAML
32 lines
825 B
YAML
successMessage: Container does not have any dangerous capabilities
|
|
failureMessage: Container should not have dangerous capabilities
|
|
category: Security
|
|
target: Container
|
|
schema:
|
|
'$schema': https://json-schema.org/draft/2019-09/schema
|
|
type: object
|
|
properties:
|
|
securityContext:
|
|
type: object
|
|
properties:
|
|
capabilities:
|
|
type: object
|
|
properties:
|
|
add:
|
|
type: array
|
|
allOf:
|
|
- not:
|
|
contains:
|
|
pattern: '^(?i)ALL$'
|
|
- not:
|
|
contains:
|
|
pattern: '^(?i)SYS_ADMIN$'
|
|
- not:
|
|
contains:
|
|
pattern: '^(?i)NET_ADMIN$'
|
|
|
|
|
|
mutations:
|
|
- op: remove
|
|
path: /securityContext/capabilities/add
|