github/polaris
1
0
Fork 0
mirror of https://github.com/FairwindsOps/polaris.git synced 2026-05-20 08:04:58 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
8bfed75498fbeba0e131e96209dacbec4b111d8a
polaris/test/checks
History
Robert Brennan 8bfed75498 Minor fixes for NSA checks (#952) 
* fix rbac checks

* fix sensitive env var check

* add test case

* fix service account check

* fix comment

---------

Co-authored-by: Andrew Suderman <andy@fairwinds.com>
2023-06-09 12:35:36 -06:00
..
automountServiceAccountToken
Minor fixes for NSA checks (#952)
2023-06-09 12:35:36 -06:00
clusterrolebindingClusterAdmin
FWI-2719: Enable new RBAC / sensitive content / Pod exec checks, add hasPrefix and hasSuffix functions to the GO template, exempt system: name prefixes for RBAC checks, sensitive content checks ignore valueFrom, (#832)
2022-11-14 15:05:02 -07:00
clusterrolebindingPodExecAttach
FWI-2719: Enable new RBAC / sensitive content / Pod exec checks, add hasPrefix and hasSuffix functions to the GO template, exempt system: name prefixes for RBAC checks, sensitive content checks ignore valueFrom, (#832)
2022-11-14 15:05:02 -07:00
clusterrolePodExecAttach
FWI-2719: Enable new RBAC / sensitive content / Pod exec checks, add hasPrefix and hasSuffix functions to the GO template, exempt system: name prefixes for RBAC checks, sensitive content checks ignore valueFrom, (#832)
2022-11-14 15:05:02 -07:00
cpuLimitsMissing
[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821)
2022-09-15 12:38:22 -04:00
cpuRequestsMissing
[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821)
2022-09-15 12:38:22 -04:00
dangerousCapabilities
[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821)
2022-09-15 12:38:22 -04:00
deploymentMissingReplicas
[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821)
2022-09-15 12:38:22 -04:00
hostIPCSet
[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821)
2022-09-15 12:38:22 -04:00
hostNetworkSet
[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821)
2022-09-15 12:38:22 -04:00
hostPIDSet
[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821)
2022-09-15 12:38:22 -04:00
hostPortSet
[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821)
2022-09-15 12:38:22 -04:00
insecureCapabilities
Minor fixes for NSA checks (#952)
2023-06-09 12:35:36 -06:00
linuxHardening
FWI-2476: Add missingNetworkPolicy, automountServiceAccountToken, and linuxHardening checks (#816)
2022-08-05 09:44:18 -06:00
livenessProbeMissing
[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821)
2022-09-15 12:38:22 -04:00
memoryLimitsMissing
[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821)
2022-09-15 12:38:22 -04:00
memoryRequestsMissing
[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821)
2022-09-15 12:38:22 -04:00
metadataAndNameMismatched
Add support for check templates (#520)
2021-04-09 09:08:31 -04:00
missingNetworkPolicy
FWI-2476: Add missingNetworkPolicy, automountServiceAccountToken, and linuxHardening checks (#816)
2022-08-05 09:44:18 -06:00
missingPodDisruptionBudget
better support for namespaces in additional schemas (#593)
2021-07-27 10:31:34 -04:00
nakedPod
Change target: Pod to target: PodSpec (#726)
2022-06-07 07:37:25 -06:00
notReadOnlyRootFilesystem
update notReadOnlyRootFilesystem check (#543)
2021-05-24 15:21:04 -07:00
oneController
Change target: Pod to target: PodSpec (#726)
2022-06-07 07:37:25 -06:00
pdbDisruptionsIsZero
change test for PDB disruptions (#620)
2021-08-31 11:40:36 -04:00
priorityClassNotSet
Add priority class check, some test infra (#342)
2020-06-22 16:34:48 -04:00
privilegeEscalationAllowed
Pod level testing (#546)
2021-05-25 12:59:28 -04:00
pullPolicyNotAlways
[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821)
2022-09-15 12:38:22 -04:00
readinessProbeMissing
[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821)
2022-09-15 12:38:22 -04:00
rolebindingClusterAdminClusterRole
FWI-2719: Enable new RBAC / sensitive content / Pod exec checks, add hasPrefix and hasSuffix functions to the GO template, exempt system: name prefixes for RBAC checks, sensitive content checks ignore valueFrom, (#832)
2022-11-14 15:05:02 -07:00
rolebindingClusterAdminRole
FWI-2719: Enable new RBAC / sensitive content / Pod exec checks, add hasPrefix and hasSuffix functions to the GO template, exempt system: name prefixes for RBAC checks, sensitive content checks ignore valueFrom, (#832)
2022-11-14 15:05:02 -07:00
rolebindingClusterRolePodExecAttach
FWI-2719: Enable new RBAC / sensitive content / Pod exec checks, add hasPrefix and hasSuffix functions to the GO template, exempt system: name prefixes for RBAC checks, sensitive content checks ignore valueFrom, (#832)
2022-11-14 15:05:02 -07:00
rolebindingRolePodExecAttach
FWI-2719: Enable new RBAC / sensitive content / Pod exec checks, add hasPrefix and hasSuffix functions to the GO template, exempt system: name prefixes for RBAC checks, sensitive content checks ignore valueFrom, (#832)
2022-11-14 15:05:02 -07:00
rolePodExecAttach
FWI-2719: Enable new RBAC / sensitive content / Pod exec checks, add hasPrefix and hasSuffix functions to the GO template, exempt system: name prefixes for RBAC checks, sensitive content checks ignore valueFrom, (#832)
2022-11-14 15:05:02 -07:00
runAsPrivileged
Pod level testing (#546)
2021-05-25 12:59:28 -04:00
runAsRootAllowed
[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821)
2022-09-15 12:38:22 -04:00
sensitiveConfigmapContent
FWI-2509: Add sensitiveContainerEnvVar and sensitiveConfigMapContent checks (#817)
2022-08-05 11:58:57 -04:00
sensitiveContainerEnvVar
FWI-2719: Enable new RBAC / sensitive content / Pod exec checks, add hasPrefix and hasSuffix functions to the GO template, exempt system: name prefixes for RBAC checks, sensitive content checks ignore valueFrom, (#832)
2022-11-14 15:05:02 -07:00
tagNotSpecified
add failure, failure.latest and success.yaml file (#541)
2021-05-18 12:40:55 -07:00
tlsSettingsMissing
Add support for arbitrary Kinds (#505)
2021-03-26 08:29:59 -04:00
topologySpreadConstraint
Fix #547 - add a check for topologySpreadConstraint (#879)
2023-01-04 14:05:23 -07:00