polaris

2023-06-09 12:35:36 -06:00

FWI-2719: Enable new RBAC / sensitive content / Pod exec checks, add hasPrefix and hasSuffix functions to the GO template, exempt system: name prefixes for RBAC checks, sensitive content checks ignore valueFrom, (#832 )

2022-11-14 15:05:02 -07:00

clusterrolebindingPodExecAttach

FWI-2719: Enable new RBAC / sensitive content / Pod exec checks, add hasPrefix and hasSuffix functions to the GO template, exempt system: name prefixes for RBAC checks, sensitive content checks ignore valueFrom, (#832 )

2022-11-14 15:05:02 -07:00

clusterrolePodExecAttach

FWI-2719: Enable new RBAC / sensitive content / Pod exec checks, add hasPrefix and hasSuffix functions to the GO template, exempt system: name prefixes for RBAC checks, sensitive content checks ignore valueFrom, (#832 )

2022-11-14 15:05:02 -07:00

cpuLimitsMissing

[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821 )

2022-09-15 12:38:22 -04:00

cpuLimitsRange

add cpuLimitsRange

2023-08-08 13:31:36 -04:00

cpuRequestsMissing

[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821 )

2022-09-15 12:38:22 -04:00

dangerousCapabilities

[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821 )

2022-09-15 12:38:22 -04:00

deploymentMissingReplicas

[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821 )

2022-09-15 12:38:22 -04:00

hostIPCSet

[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821 )

2022-09-15 12:38:22 -04:00

hostNetworkSet

[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821 )

2022-09-15 12:38:22 -04:00

hostPIDSet

[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821 )

2022-09-15 12:38:22 -04:00

hostPortSet

[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821 )

2022-09-15 12:38:22 -04:00

insecureCapabilities

Minor fixes for NSA checks (#952 )

2023-06-09 12:35:36 -06:00

linuxHardening

FWI-2476: Add missingNetworkPolicy, automountServiceAccountToken, and linuxHardening checks (#816 )

2022-08-05 09:44:18 -06:00

livenessProbeMissing

[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821 )

2022-09-15 12:38:22 -04:00

memoryLimitsMissing

[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821 )

2022-09-15 12:38:22 -04:00

memoryRequestsMissing

[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821 )

2022-09-15 12:38:22 -04:00

metadataAndInstanceMismatched

change kubernetes.io/ label from name to instance (#973 )

2023-07-13 11:33:15 -06:00

missingNetworkPolicy

FWI-2476: Add missingNetworkPolicy, automountServiceAccountToken, and linuxHardening checks (#816 )

2022-08-05 09:44:18 -06:00

missingPodDisruptionBudget

better support for namespaces in additional schemas (#593 )

2021-07-27 10:31:34 -04:00

nakedPod

Change target: Pod to target: PodSpec (#726 )

2022-06-07 07:37:25 -06:00

notReadOnlyRootFilesystem

update notReadOnlyRootFilesystem check (#543 )

2021-05-24 15:21:04 -07:00

oneController

Change target: Pod to target: PodSpec (#726 )

2022-06-07 07:37:25 -06:00

pdbDisruptionsIsZero

change test for PDB disruptions (#620 )

2021-08-31 11:40:36 -04:00

priorityClassNotSet

Add priority class check, some test infra (#342 )

2020-06-22 16:34:48 -04:00

privilegeEscalationAllowed

Pod level testing (#546 )

2021-05-25 12:59:28 -04:00

pullPolicyNotAlways

[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821 )

2022-09-15 12:38:22 -04:00

readinessProbeMissing

[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821 )

2022-09-15 12:38:22 -04:00

rolebindingClusterAdminClusterRole

FWI-2719: Enable new RBAC / sensitive content / Pod exec checks, add hasPrefix and hasSuffix functions to the GO template, exempt system: name prefixes for RBAC checks, sensitive content checks ignore valueFrom, (#832 )

2022-11-14 15:05:02 -07:00

rolebindingClusterAdminRole

FWI-2719: Enable new RBAC / sensitive content / Pod exec checks, add hasPrefix and hasSuffix functions to the GO template, exempt system: name prefixes for RBAC checks, sensitive content checks ignore valueFrom, (#832 )

2022-11-14 15:05:02 -07:00

rolebindingClusterRolePodExecAttach

FWI-2719: Enable new RBAC / sensitive content / Pod exec checks, add hasPrefix and hasSuffix functions to the GO template, exempt system: name prefixes for RBAC checks, sensitive content checks ignore valueFrom, (#832 )

2022-11-14 15:05:02 -07:00

rolebindingRolePodExecAttach

FWI-2719: Enable new RBAC / sensitive content / Pod exec checks, add hasPrefix and hasSuffix functions to the GO template, exempt system: name prefixes for RBAC checks, sensitive content checks ignore valueFrom, (#832 )

2022-11-14 15:05:02 -07:00

rolePodExecAttach

FWI-2719: Enable new RBAC / sensitive content / Pod exec checks, add hasPrefix and hasSuffix functions to the GO template, exempt system: name prefixes for RBAC checks, sensitive content checks ignore valueFrom, (#832 )

2022-11-14 15:05:02 -07:00

runAsPrivileged

Pod level testing (#546 )

2021-05-25 12:59:28 -04:00

runAsRootAllowed

[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821 )

2022-09-15 12:38:22 -04:00

sensitiveConfigmapContent

FWI-2509: Add sensitiveContainerEnvVar and sensitiveConfigMapContent checks (#817 )

2022-08-05 11:58:57 -04:00

sensitiveContainerEnvVar

FWI-2719: Enable new RBAC / sensitive content / Pod exec checks, add hasPrefix and hasSuffix functions to the GO template, exempt system: name prefixes for RBAC checks, sensitive content checks ignore valueFrom, (#832 )

2022-11-14 15:05:02 -07:00

tagNotSpecified

add failure, failure.latest and success.yaml file (#541 )

2021-05-18 12:40:55 -07:00

tlsSettingsMissing

Add support for arbitrary Kinds (#505 )

2021-03-26 08:29:59 -04:00

topologySpreadConstraint

Fix #547 - add a check for topologySpreadConstraint (#879 )

2023-01-04 14:05:23 -07:00