ivanfetch-fw 01d7a8ac00 FWI-2547: Add checks for RBAC allowing execing or attaching to a Pod (#820) ...

* Add `rolePodExecAttach` and `clusterrolePodExecAttach` checks

* Add schema tests

* Add clusterrolebindingPodExecAttach, rolebindingRolePodExecAttach, and rolebindingClusterRolePodExecAttach checks + schema-tests

* Add the new checks to the full example config

* Update checks' success/failure messages and add some helpful comments

* Update binding-related check messaging RE: roleRef pointing to a nonexistent resource, and add tests for this case

* Update rolebindingClusterRolePodExecAttach and rolebindingRolePodExecAttach to pass if a binding roleRef is a different kind, and schema tests to include a namespace

* Add additional schema tests, remove "ignore default ClusterRole|Role bindings" code from checks that actually have no default bindings

2022-08-23 12:09:44 -06:00

..

config

FWI-2547: Add checks for RBAC allowing execing or attaching to a Pod (#820)

2022-08-23 12:09:44 -06:00

dashboard

Fix license headers (#736)

2022-03-31 11:02:10 -04:00

kube

target: container also populates .Polaris.PodSpec|PodTemplate + a new .Polaris.Container representing the currently checked container, GetPodTemplate serializes data to work around a DeepCopy bug with type int (#812)

2022-07-29 07:45:56 -06:00

mutation

ensure path exists when adding mutations (#789)

2022-07-07 10:00:36 -04:00

validator

Fix namespace checking when validating additional schemas which are not namespaced (#822)

2022-08-18 18:34:32 -06:00

webhook

Expose GetValidateResults function to be used in the polaris package (#763)

2022-06-15 15:28:33 +03:00