mirror of
https://github.com/FairwindsOps/polaris.git
synced 2026-05-14 05:06:59 +00:00
d011bb454a
* add failure.all.yaml for dangerouscapabilities test * change to [ALL] failing test * add failure.all.yaml for dangerouscapabilities test * change to [ALL] failing test * fix dangerous caps test Co-authored-by: Robert Brennan <contact@rbren.io>
27 lines
717 B
YAML
27 lines
717 B
YAML
successMessage: Container does not have any dangerous capabilities
|
|
failureMessage: Container should not have dangerous capabilities
|
|
category: Security
|
|
target: Container
|
|
schema:
|
|
'$schema': http://json-schema.org/draft-07/schema
|
|
type: object
|
|
properties:
|
|
securityContext:
|
|
type: object
|
|
properties:
|
|
capabilities:
|
|
type: object
|
|
properties:
|
|
add:
|
|
type: array
|
|
allOf:
|
|
- not:
|
|
contains:
|
|
const: ALL
|
|
- not:
|
|
contains:
|
|
const: SYS_ADMIN
|
|
- not:
|
|
contains:
|
|
const: NET_ADMIN
|