github/polaris
1
0
Fork 0
mirror of https://github.com/FairwindsOps/polaris.git synced 2026-05-16 06:07:18 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
3e96c582f0fe7cd05dd2fb4588f16161da3d3ca0
polaris/checks
History
Robert Brennan c856874564 Update topologySpreadConstraint.yaml (#971) 
* Update topologySpreadConstraint.yaml

* Update topologySpreadConstraint.yaml

* fix test

* add passing test

---------

Co-authored-by: Andrew Suderman <andy@fairwinds.com>
2023-08-28 08:49:08 -06:00
..
automountServiceAccountToken.yaml
Minor fixes for NSA checks (#952)
2023-06-09 12:35:36 -06:00
clusterrolebindingClusterAdmin.yaml
Minor fixes for NSA checks (#952)
2023-06-09 12:35:36 -06:00
clusterrolebindingPodExecAttach.yaml
Minor fixes for NSA checks (#952)
2023-06-09 12:35:36 -06:00
clusterrolePodExecAttach.yaml
FWI-2719: Enable new RBAC / sensitive content / Pod exec checks, add hasPrefix and hasSuffix functions to the GO template, exempt system: name prefixes for RBAC checks, sensitive content checks ignore valueFrom, (#832)
2022-11-14 15:05:02 -07:00
cpuLimitsMissing.yaml
[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821)
2022-09-15 12:38:22 -04:00
cpuRequestsMissing.yaml
[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821)
2022-09-15 12:38:22 -04:00
dangerousCapabilities.yaml
Update dangerousCapabilities.yaml (#866)
2023-01-05 10:24:21 -07:00
deploymentMissingReplicas.yaml
Added more mutations and refactor test to test each mutation separately (#734)
2022-04-08 17:19:14 +03:00
hostIPCSet.yaml
Change target: Pod to target: PodSpec (#726)
2022-06-07 07:37:25 -06:00
hostNetworkSet.yaml
Change target: Pod to target: PodSpec (#726)
2022-06-07 07:37:25 -06:00
hostPIDSet.yaml
Change target: Pod to target: PodSpec (#726)
2022-06-07 07:37:25 -06:00
hostPortSet.yaml
[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821)
2022-09-15 12:38:22 -04:00
insecureCapabilities.yaml
[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821)
2022-09-15 12:38:22 -04:00
linuxHardening.yaml
FWI-2476: Add missingNetworkPolicy, automountServiceAccountToken, and linuxHardening checks (#816)
2022-08-05 09:44:18 -06:00
livenessProbeMissing.yaml
[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821)
2022-09-15 12:38:22 -04:00
memoryLimitsMissing.yaml
[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821)
2022-09-15 12:38:22 -04:00
memoryRequestsMissing.yaml
[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821)
2022-09-15 12:38:22 -04:00
metadataAndInstanceMismatched.yaml
change kubernetes.io/ label from name to instance (#973)
2023-07-13 11:33:15 -06:00
missingNetworkPolicy.yaml
FWI-2476: Add missingNetworkPolicy, automountServiceAccountToken, and linuxHardening checks (#816)
2022-08-05 09:44:18 -06:00
missingPodDisruptionBudget.yaml
Support multi-resource templates (#524)
2021-05-06 14:01:20 -04:00
notReadOnlyRootFilesystem.yaml
Enable pullPolicyNotAlways (#795)
2022-07-11 13:20:17 -04:00
pdbDisruptionsIsZero.yaml
change test for PDB disruptions (#620)
2021-08-31 11:40:36 -04:00
priorityClassNotSet.yaml
FWI-4307 - fix checks category (#964)
2023-06-21 12:08:49 -04:00
privilegeEscalationAllowed.yaml
[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821)
2022-09-15 12:38:22 -04:00
pullPolicyNotAlways.yaml
Add mutation field to imagePolicyNotAlways (#712)
2022-03-25 16:38:58 +03:00
readinessProbeMissing.yaml
[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821)
2022-09-15 12:38:22 -04:00
rolebindingClusterAdminClusterRole.yaml
FWI-2719: Enable new RBAC / sensitive content / Pod exec checks, add hasPrefix and hasSuffix functions to the GO template, exempt system: name prefixes for RBAC checks, sensitive content checks ignore valueFrom, (#832)
2022-11-14 15:05:02 -07:00
rolebindingClusterAdminRole.yaml
FWI-2719: Enable new RBAC / sensitive content / Pod exec checks, add hasPrefix and hasSuffix functions to the GO template, exempt system: name prefixes for RBAC checks, sensitive content checks ignore valueFrom, (#832)
2022-11-14 15:05:02 -07:00
rolebindingClusterRolePodExecAttach.yaml
FWI-2719: Enable new RBAC / sensitive content / Pod exec checks, add hasPrefix and hasSuffix functions to the GO template, exempt system: name prefixes for RBAC checks, sensitive content checks ignore valueFrom, (#832)
2022-11-14 15:05:02 -07:00
rolebindingRolePodExecAttach.yaml
FWI-2719: Enable new RBAC / sensitive content / Pod exec checks, add hasPrefix and hasSuffix functions to the GO template, exempt system: name prefixes for RBAC checks, sensitive content checks ignore valueFrom, (#832)
2022-11-14 15:05:02 -07:00
rolePodExecAttach.yaml
FWI-2719: Enable new RBAC / sensitive content / Pod exec checks, add hasPrefix and hasSuffix functions to the GO template, exempt system: name prefixes for RBAC checks, sensitive content checks ignore valueFrom, (#832)
2022-11-14 15:05:02 -07:00
runAsPrivileged.yaml
Change target: Pod to target: PodSpec (#726)
2022-06-07 07:37:25 -06:00
runAsRootAllowed.yaml
ensure path exists when adding mutations (#789)
2022-07-07 10:00:36 -04:00
sensitiveConfigmapContent.yaml
FWI-2509: Add sensitiveContainerEnvVar and sensitiveConfigMapContent checks (#817)
2022-08-05 11:58:57 -04:00
sensitiveContainerEnvVar.yaml
Minor fixes for NSA checks (#952)
2023-06-09 12:35:36 -06:00
tagNotSpecified.yaml
Recategorize the results into standard categories. (#434)
2020-11-04 10:17:37 -05:00
tlsSettingsMissing.yaml
Add support for arbitrary Kinds (#505)
2021-03-26 08:29:59 -04:00
topologySpreadConstraint.yaml
Update topologySpreadConstraint.yaml (#971)
2023-08-28 08:49:08 -06:00