github/polaris
1
0
Fork 0
mirror of https://github.com/FairwindsOps/polaris.git synced 2026-05-24 18:13:08 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
952b6aed65ed971bf64a64c2698c3df3905248cc
polaris/test/checks
History
Vitor Rodrigo Vezani 952b6aed65 INSIGHTS-157 - PDB <> HPA check (#1057) 
* fix typo

* fix failure message

* fix changelog

* fix missingPodDisruptionBudget validation

* add tests for pdbMinAvailableLessThenHPAMaxReplicas

* add simple success test

* fix typo

* lowercasing warnings

* WIP implement pdbMinAvailableLessThanHPAMaxReplicas

* change check name

* rename testes

* fix check message

* change check name

* minor fixes

* improving tests

* improve tests

* fix check name

* Update docs/checks/reliability.md

Co-authored-by: Andy Suderman <andy@fairwinds.com>

* fix/add tests

* fixes from PR

* fix error message

---------

Co-authored-by: Andy Suderman <andy@fairwinds.com>
2024-07-08 14:47:54 -03:00
..
automountServiceAccountToken
Minor fixes for NSA checks (#952)
2023-06-09 12:35:36 -06:00
clusterrolebindingClusterAdmin
FWI-2719: Enable new RBAC / sensitive content / Pod exec checks, add hasPrefix and hasSuffix functions to the GO template, exempt system: name prefixes for RBAC checks, sensitive content checks ignore valueFrom, (#832)
2022-11-14 15:05:02 -07:00
clusterrolebindingPodExecAttach
FWI-2719: Enable new RBAC / sensitive content / Pod exec checks, add hasPrefix and hasSuffix functions to the GO template, exempt system: name prefixes for RBAC checks, sensitive content checks ignore valueFrom, (#832)
2022-11-14 15:05:02 -07:00
clusterrolePodExecAttach
FWI-2719: Enable new RBAC / sensitive content / Pod exec checks, add hasPrefix and hasSuffix functions to the GO template, exempt system: name prefixes for RBAC checks, sensitive content checks ignore valueFrom, (#832)
2022-11-14 15:05:02 -07:00
cpuLimitsMissing
[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821)
2022-09-15 12:38:22 -04:00
cpuRequestsMissing
[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821)
2022-09-15 12:38:22 -04:00
dangerousCapabilities
[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821)
2022-09-15 12:38:22 -04:00
deploymentMissingReplicas
[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821)
2022-09-15 12:38:22 -04:00
hostIPCSet
[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821)
2022-09-15 12:38:22 -04:00
hostNetworkSet
[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821)
2022-09-15 12:38:22 -04:00
hostPIDSet
[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821)
2022-09-15 12:38:22 -04:00
hostPortSet
[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821)
2022-09-15 12:38:22 -04:00
hpaMaxAvailability
INSIGHTS-90 - implement HPA minAvailable and HPA maxAvailable checks (#1053)
2024-06-26 17:31:35 -03:00
hpaMinAvailability
INSIGHTS-90 - implement HPA minAvailable and HPA maxAvailable checks (#1053)
2024-06-26 17:31:35 -03:00
insecureCapabilities
Minor fixes for NSA checks (#952)
2023-06-09 12:35:36 -06:00
linuxHardening
FWI-2476: Add missingNetworkPolicy, automountServiceAccountToken, and linuxHardening checks (#816)
2022-08-05 09:44:18 -06:00
livenessProbeMissing
[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821)
2022-09-15 12:38:22 -04:00
memoryLimitsMissing
[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821)
2022-09-15 12:38:22 -04:00
memoryRequestsMissing
[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821)
2022-09-15 12:38:22 -04:00
metadataAndInstanceMismatched
change kubernetes.io/ label from name to instance (#973)
2023-07-13 11:33:15 -06:00
missingNetworkPolicy
FWI-2476: Add missingNetworkPolicy, automountServiceAccountToken, and linuxHardening checks (#816)
2022-08-05 09:44:18 -06:00
missingPodDisruptionBudget
INSIGHTS-156 - Fix typo and improve failure message (#1055)
2024-06-27 17:10:21 -03:00
nakedPod
Change target: Pod to target: PodSpec (#726)
2022-06-07 07:37:25 -06:00
notReadOnlyRootFilesystem
update notReadOnlyRootFilesystem check (#543)
2021-05-24 15:21:04 -07:00
oneController
Change target: Pod to target: PodSpec (#726)
2022-06-07 07:37:25 -06:00
pdbDisruptionsIsZero
fix typo for minAvailable and maxAvailable (#1050)
2024-06-03 16:53:13 -03:00
pdbMinAvailableGreaterThanHPAMinReplicas
INSIGHTS-157 - PDB <> HPA check (#1057)
2024-07-08 14:47:54 -03:00
priorityClassNotSet
Add priority class check, some test infra (#342)
2020-06-22 16:34:48 -04:00
privilegeEscalationAllowed
Pod level testing (#546)
2021-05-25 12:59:28 -04:00
pullPolicyNotAlways
[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821)
2022-09-15 12:38:22 -04:00
readinessProbeMissing
[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821)
2022-09-15 12:38:22 -04:00
resourceRange
Fix numerical resource ranges (#991)
2023-09-05 11:15:45 -06:00
rolebindingClusterAdminClusterRole
fix: conditional expressions should be at very top of additionalSchemaStrings (#1025)
2024-01-03 14:17:04 -06:00
rolebindingClusterAdminRole
FWI-2719: Enable new RBAC / sensitive content / Pod exec checks, add hasPrefix and hasSuffix functions to the GO template, exempt system: name prefixes for RBAC checks, sensitive content checks ignore valueFrom, (#832)
2022-11-14 15:05:02 -07:00
rolebindingClusterRolePodExecAttach
fix: conditional expressions should be at very top of additionalSchemaStrings (#1025)
2024-01-03 14:17:04 -06:00
rolebindingRolePodExecAttach
fix: conditional expressions should be at very top of additionalSchemaStrings (#1025)
2024-01-03 14:17:04 -06:00
rolePodExecAttach
FWI-2719: Enable new RBAC / sensitive content / Pod exec checks, add hasPrefix and hasSuffix functions to the GO template, exempt system: name prefixes for RBAC checks, sensitive content checks ignore valueFrom, (#832)
2022-11-14 15:05:02 -07:00
runAsPrivileged
Pod level testing (#546)
2021-05-25 12:59:28 -04:00
runAsRootAllowed
[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821)
2022-09-15 12:38:22 -04:00
sensitiveConfigmapContent
FWI-2509: Add sensitiveContainerEnvVar and sensitiveConfigMapContent checks (#817)
2022-08-05 11:58:57 -04:00
sensitiveContainerEnvVar
FWI-2719: Enable new RBAC / sensitive content / Pod exec checks, add hasPrefix and hasSuffix functions to the GO template, exempt system: name prefixes for RBAC checks, sensitive content checks ignore valueFrom, (#832)
2022-11-14 15:05:02 -07:00
tagNotSpecified
add failure, failure.latest and success.yaml file (#541)
2021-05-18 12:40:55 -07:00
tlsSettingsMissing
Add support for arbitrary Kinds (#505)
2021-03-26 08:29:59 -04:00
topologySpreadConstraint
Update topologySpreadConstraint.yaml (#971)
2023-08-28 08:49:08 -06:00