mirror of
https://github.com/FairwindsOps/polaris.git
synced 2026-05-09 02:36:43 +00:00
281 lines
9.3 KiB
JSON
281 lines
9.3 KiB
JSON
{
|
|
"PolarisOutputVersion": "1.0",
|
|
"AuditTime": "0001-01-01T00:00:00Z",
|
|
"SourceType": "Path",
|
|
"SourceName": "deploy/",
|
|
"DisplayName": "deploy/",
|
|
"ClusterInfo": {
|
|
"Version": "unknown",
|
|
"Nodes": 0,
|
|
"Pods": 0,
|
|
"Namespaces": 2,
|
|
"Deployments": 2,
|
|
"StatefulSets": 0,
|
|
"DaemonSets": 0,
|
|
"Jobs": 0,
|
|
"CronJobs": 0,
|
|
"ReplicationControllers": 0
|
|
},
|
|
"Results": [
|
|
{
|
|
"Name": "polaris-dashboard",
|
|
"Namespace": "polaris",
|
|
"Kind": "Deployment",
|
|
"Messages": {},
|
|
"PodResult": {
|
|
"Name": "",
|
|
"Messages": {
|
|
"hostIPCSet": {
|
|
"ID": "hostIPCSet",
|
|
"Message": "Host IPC is not configured",
|
|
"Success": true,
|
|
"Severity": "error",
|
|
"Category": "Security"
|
|
},
|
|
"hostNetworkSet": {
|
|
"ID": "hostNetworkSet",
|
|
"Message": "Host network is not configured",
|
|
"Success": true,
|
|
"Severity": "warning",
|
|
"Category": "Networking"
|
|
},
|
|
"hostPIDSet": {
|
|
"ID": "hostPIDSet",
|
|
"Message": "Host PID is not configured",
|
|
"Success": true,
|
|
"Severity": "error",
|
|
"Category": "Security"
|
|
}
|
|
},
|
|
"ContainerResults": [
|
|
{
|
|
"Name": "dashboard",
|
|
"Messages": {
|
|
"cpuLimitsMissing": {
|
|
"ID": "cpuLimitsMissing",
|
|
"Message": "CPU limits are set",
|
|
"Success": true,
|
|
"Severity": "warning",
|
|
"Category": "Resources"
|
|
},
|
|
"cpuRequestsMissing": {
|
|
"ID": "cpuRequestsMissing",
|
|
"Message": "CPU requests are set",
|
|
"Success": true,
|
|
"Severity": "warning",
|
|
"Category": "Resources"
|
|
},
|
|
"dangerousCapabilities": {
|
|
"ID": "dangerousCapabilities",
|
|
"Message": "Container does not have any dangerous capabilities",
|
|
"Success": true,
|
|
"Severity": "error",
|
|
"Category": "Security"
|
|
},
|
|
"hostPortSet": {
|
|
"ID": "hostPortSet",
|
|
"Message": "Host port is not configured",
|
|
"Success": true,
|
|
"Severity": "warning",
|
|
"Category": "Networking"
|
|
},
|
|
"insecureCapabilities": {
|
|
"ID": "insecureCapabilities",
|
|
"Message": "Container does not have any insecure capabilities",
|
|
"Success": true,
|
|
"Severity": "warning",
|
|
"Category": "Security"
|
|
},
|
|
"livenessProbeMissing": {
|
|
"ID": "livenessProbeMissing",
|
|
"Message": "Liveness probe is configured",
|
|
"Success": true,
|
|
"Severity": "warning",
|
|
"Category": "Health Checks"
|
|
},
|
|
"memoryLimitsMissing": {
|
|
"ID": "memoryLimitsMissing",
|
|
"Message": "Memory limits are set",
|
|
"Success": true,
|
|
"Severity": "warning",
|
|
"Category": "Resources"
|
|
},
|
|
"memoryRequestsMissing": {
|
|
"ID": "memoryRequestsMissing",
|
|
"Message": "Memory requests are set",
|
|
"Success": true,
|
|
"Severity": "warning",
|
|
"Category": "Resources"
|
|
},
|
|
"privilegeEscalationAllowed": {
|
|
"ID": "privilegeEscalationAllowed",
|
|
"Message": "Privilege escalation not allowed",
|
|
"Success": true,
|
|
"Severity": "error",
|
|
"Category": "Security"
|
|
},
|
|
"readinessProbeMissing": {
|
|
"ID": "readinessProbeMissing",
|
|
"Message": "Readiness probe is configured",
|
|
"Success": true,
|
|
"Severity": "warning",
|
|
"Category": "Health Checks"
|
|
},
|
|
"runAsPrivileged": {
|
|
"ID": "runAsPrivileged",
|
|
"Message": "Not running as privileged",
|
|
"Success": true,
|
|
"Severity": "error",
|
|
"Category": "Security"
|
|
},
|
|
"runAsRootAllowed": {
|
|
"ID": "runAsRootAllowed",
|
|
"Message": "Is not allowed to run as root",
|
|
"Success": true,
|
|
"Severity": "warning",
|
|
"Category": "Security"
|
|
},
|
|
"tagNotSpecified": {
|
|
"ID": "tagNotSpecified",
|
|
"Message": "Image tag is specified",
|
|
"Success": true,
|
|
"Severity": "error",
|
|
"Category": "Images"
|
|
}
|
|
}
|
|
}
|
|
]
|
|
}
|
|
},
|
|
{
|
|
"Name": "polaris-webhook",
|
|
"Namespace": "polaris",
|
|
"Kind": "Deployment",
|
|
"Messages": {},
|
|
"PodResult": {
|
|
"Name": "",
|
|
"Messages": {
|
|
"hostIPCSet": {
|
|
"ID": "hostIPCSet",
|
|
"Message": "Host IPC is not configured",
|
|
"Success": true,
|
|
"Severity": "error",
|
|
"Category": "Security"
|
|
},
|
|
"hostNetworkSet": {
|
|
"ID": "hostNetworkSet",
|
|
"Message": "Host network is not configured",
|
|
"Success": true,
|
|
"Severity": "warning",
|
|
"Category": "Networking"
|
|
},
|
|
"hostPIDSet": {
|
|
"ID": "hostPIDSet",
|
|
"Message": "Host PID is not configured",
|
|
"Success": true,
|
|
"Severity": "error",
|
|
"Category": "Security"
|
|
}
|
|
},
|
|
"ContainerResults": [
|
|
{
|
|
"Name": "webhook",
|
|
"Messages": {
|
|
"cpuLimitsMissing": {
|
|
"ID": "cpuLimitsMissing",
|
|
"Message": "CPU limits are set",
|
|
"Success": true,
|
|
"Severity": "warning",
|
|
"Category": "Resources"
|
|
},
|
|
"cpuRequestsMissing": {
|
|
"ID": "cpuRequestsMissing",
|
|
"Message": "CPU requests are set",
|
|
"Success": true,
|
|
"Severity": "warning",
|
|
"Category": "Resources"
|
|
},
|
|
"dangerousCapabilities": {
|
|
"ID": "dangerousCapabilities",
|
|
"Message": "Container does not have any dangerous capabilities",
|
|
"Success": true,
|
|
"Severity": "error",
|
|
"Category": "Security"
|
|
},
|
|
"hostPortSet": {
|
|
"ID": "hostPortSet",
|
|
"Message": "Host port is not configured",
|
|
"Success": true,
|
|
"Severity": "warning",
|
|
"Category": "Networking"
|
|
},
|
|
"insecureCapabilities": {
|
|
"ID": "insecureCapabilities",
|
|
"Message": "Container does not have any insecure capabilities",
|
|
"Success": true,
|
|
"Severity": "warning",
|
|
"Category": "Security"
|
|
},
|
|
"livenessProbeMissing": {
|
|
"ID": "livenessProbeMissing",
|
|
"Message": "Liveness probe is configured",
|
|
"Success": true,
|
|
"Severity": "warning",
|
|
"Category": "Health Checks"
|
|
},
|
|
"memoryLimitsMissing": {
|
|
"ID": "memoryLimitsMissing",
|
|
"Message": "Memory limits are set",
|
|
"Success": true,
|
|
"Severity": "warning",
|
|
"Category": "Resources"
|
|
},
|
|
"memoryRequestsMissing": {
|
|
"ID": "memoryRequestsMissing",
|
|
"Message": "Memory requests are set",
|
|
"Success": true,
|
|
"Severity": "warning",
|
|
"Category": "Resources"
|
|
},
|
|
"privilegeEscalationAllowed": {
|
|
"ID": "privilegeEscalationAllowed",
|
|
"Message": "Privilege escalation not allowed",
|
|
"Success": true,
|
|
"Severity": "error",
|
|
"Category": "Security"
|
|
},
|
|
"readinessProbeMissing": {
|
|
"ID": "readinessProbeMissing",
|
|
"Message": "Readiness probe is configured",
|
|
"Success": true,
|
|
"Severity": "warning",
|
|
"Category": "Health Checks"
|
|
},
|
|
"runAsPrivileged": {
|
|
"ID": "runAsPrivileged",
|
|
"Message": "Not running as privileged",
|
|
"Success": true,
|
|
"Severity": "error",
|
|
"Category": "Security"
|
|
},
|
|
"runAsRootAllowed": {
|
|
"ID": "runAsRootAllowed",
|
|
"Message": "Is not allowed to run as root",
|
|
"Success": true,
|
|
"Severity": "warning",
|
|
"Category": "Security"
|
|
},
|
|
"tagNotSpecified": {
|
|
"ID": "tagNotSpecified",
|
|
"Message": "Image tag is specified",
|
|
"Success": true,
|
|
"Severity": "error",
|
|
"Category": "Images"
|
|
}
|
|
}
|
|
}
|
|
]
|
|
}
|
|
}
|
|
]
|
|
} |