mirror of
https://github.com/FairwindsOps/polaris.git
synced 2026-05-22 09:03:40 +00:00
79 lines
1.4 KiB
YAML
79 lines
1.4 KiB
YAML
resources:
|
|
cpuRequestsMissing: warning
|
|
cpuRequestRanges:
|
|
warning:
|
|
below: 50m
|
|
above: 1000m
|
|
error:
|
|
below: 500m
|
|
above: 2000m
|
|
cpuLimitsMissing: warning
|
|
cpuLimitRanges:
|
|
warning:
|
|
below: 50m
|
|
above: 1000m
|
|
error:
|
|
below: 500m
|
|
above: 2000m
|
|
memoryRequestsMissing: warning
|
|
memoryRequestRanges:
|
|
warning:
|
|
below: 50M
|
|
above: 2G
|
|
error:
|
|
below: 100M
|
|
above: 4G
|
|
memoryLimitsMissing: warning
|
|
memoryLimitRanges:
|
|
warning:
|
|
below: 50M
|
|
above: 2G
|
|
error:
|
|
below: 100M
|
|
above: 4G
|
|
images:
|
|
tagNotSpecified: error
|
|
pullPolicyNotAlways: warning
|
|
whitelist:
|
|
error:
|
|
- gcr.io/*
|
|
blacklist:
|
|
warning:
|
|
- docker.io/*
|
|
healthChecks:
|
|
readinessProbeMissing: warning
|
|
livenessProbeMissing: warning
|
|
networking:
|
|
hostAliasSet: error
|
|
hostIPCSet: error
|
|
hostNetworkSet: error
|
|
hostPIDSet: error
|
|
hostPortSet: error
|
|
security:
|
|
runAsPriviliged: warning
|
|
notReadOnlyRootFileSystem: warning
|
|
runAsNonRoot: warning
|
|
capabilities:
|
|
blacklist:
|
|
error:
|
|
- CHOWN
|
|
- SYS_CHROOT
|
|
- AUDIT_WRITE
|
|
whitelist:
|
|
warning:
|
|
- CHOWN
|
|
- DAC_OVERRIDE
|
|
- FSETID
|
|
- FOWNER
|
|
- MKNOD
|
|
- NET_RAW
|
|
- SETGID
|
|
- SETUID
|
|
- SETFCAP
|
|
- SETPCAP
|
|
- NET_BIND_SERVICE
|
|
- SYS_CHROOT
|
|
- KILL
|
|
- AUDIT_WRITE
|
|
|