mirror of
https://github.com/FairwindsOps/polaris.git
synced 2026-05-14 05:06:59 +00:00
cbc15ad069
* update runAsPrivileged to test at pod level * update runAsPrivileged to test at pod level * add pod level success/failure tests * add insuecure capabilities pod level testing * update checks to include good/bad security * update checks for good/bad security * remove good security from runAsPrivileged
32 lines
542 B
YAML
32 lines
542 B
YAML
apiVersion: v1
|
|
kind: Pod
|
|
metadata:
|
|
name: nginx
|
|
labels:
|
|
env: test
|
|
spec:
|
|
securityContext:
|
|
capabilities:
|
|
drop:
|
|
containers:
|
|
- name: nginx
|
|
image: nginx
|
|
securityContext:
|
|
capabilities:
|
|
drop:
|
|
- NET_ADMIN
|
|
- CHOWN
|
|
- DAC_OVERRIDE
|
|
- FSETID
|
|
- FOWNER
|
|
- MKNOD
|
|
- NET_RAW
|
|
- SETGID
|
|
- SETUID
|
|
- SETFCAP
|
|
- SETPCAP
|
|
- NET_BIND_SERVICE
|
|
- SYS_CHROOT
|
|
- KILL
|
|
- AUDIT_WRITE
|