github/polaris
1
0
Fork 0
mirror of https://github.com/FairwindsOps/polaris.git synced 2026-09-05 22:27:15 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
9be34236cb33eaf582de27f529a446ce71807bd2
polaris/test/checks
T
History
Andrew Suderman e7eb079921 change kubernetes.io/ label from name to instance (#973) 
* Fix #972 change label from name to instance

* Fix tests

* more references

* fix check

* Fix example config
2023-07-13 11:33:15 -06:00
..
automountServiceAccountToken
Minor fixes for NSA checks (#952)
2023-06-09 12:35:36 -06:00
clusterrolebindingClusterAdmin
FWI-2719: Enable new RBAC / sensitive content / Pod exec checks, add hasPrefix and hasSuffix functions to the GO template, exempt system: name prefixes for RBAC checks, sensitive content checks ignore valueFrom, (#832)
2022-11-14 15:05:02 -07:00
clusterrolebindingPodExecAttach
FWI-2719: Enable new RBAC / sensitive content / Pod exec checks, add hasPrefix and hasSuffix functions to the GO template, exempt system: name prefixes for RBAC checks, sensitive content checks ignore valueFrom, (#832)
2022-11-14 15:05:02 -07:00
clusterrolePodExecAttach
FWI-2719: Enable new RBAC / sensitive content / Pod exec checks, add hasPrefix and hasSuffix functions to the GO template, exempt system: name prefixes for RBAC checks, sensitive content checks ignore valueFrom, (#832)
2022-11-14 15:05:02 -07:00
cpuLimitsMissing
[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821)
2022-09-15 12:38:22 -04:00
cpuRequestsMissing
[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821)
2022-09-15 12:38:22 -04:00
dangerousCapabilities
[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821)
2022-09-15 12:38:22 -04:00
deploymentMissingReplicas
[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821)
2022-09-15 12:38:22 -04:00
hostIPCSet
[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821)
2022-09-15 12:38:22 -04:00
hostNetworkSet
[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821)
2022-09-15 12:38:22 -04:00
hostPIDSet
[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821)
2022-09-15 12:38:22 -04:00
hostPortSet
[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821)
2022-09-15 12:38:22 -04:00
insecureCapabilities
Minor fixes for NSA checks (#952)
2023-06-09 12:35:36 -06:00
linuxHardening
FWI-2476: Add missingNetworkPolicy, automountServiceAccountToken, and linuxHardening checks (#816)
2022-08-05 09:44:18 -06:00
livenessProbeMissing
[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821)
2022-09-15 12:38:22 -04:00
memoryLimitsMissing
[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821)
2022-09-15 12:38:22 -04:00
memoryRequestsMissing
[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821)
2022-09-15 12:38:22 -04:00
metadataAndInstanceMismatched
change kubernetes.io/ label from name to instance (#973)
2023-07-13 11:33:15 -06:00
missingNetworkPolicy
FWI-2476: Add missingNetworkPolicy, automountServiceAccountToken, and linuxHardening checks (#816)
2022-08-05 09:44:18 -06:00
missingPodDisruptionBudget
better support for namespaces in additional schemas (#593)
2021-07-27 10:31:34 -04:00
nakedPod
Change target: Pod to target: PodSpec (#726)
2022-06-07 07:37:25 -06:00
notReadOnlyRootFilesystem
update notReadOnlyRootFilesystem check (#543)
2021-05-24 15:21:04 -07:00
oneController
Change target: Pod to target: PodSpec (#726)
2022-06-07 07:37:25 -06:00
pdbDisruptionsIsZero
change test for PDB disruptions (#620)
2021-08-31 11:40:36 -04:00
priorityClassNotSet
Add priority class check, some test infra (#342)
2020-06-22 16:34:48 -04:00
privilegeEscalationAllowed
Pod level testing (#546)
2021-05-25 12:59:28 -04:00
pullPolicyNotAlways
[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821)
2022-09-15 12:38:22 -04:00
readinessProbeMissing
[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821)
2022-09-15 12:38:22 -04:00
rolebindingClusterAdminClusterRole
FWI-2719: Enable new RBAC / sensitive content / Pod exec checks, add hasPrefix and hasSuffix functions to the GO template, exempt system: name prefixes for RBAC checks, sensitive content checks ignore valueFrom, (#832)
2022-11-14 15:05:02 -07:00
rolebindingClusterAdminRole
FWI-2719: Enable new RBAC / sensitive content / Pod exec checks, add hasPrefix and hasSuffix functions to the GO template, exempt system: name prefixes for RBAC checks, sensitive content checks ignore valueFrom, (#832)
2022-11-14 15:05:02 -07:00
rolebindingClusterRolePodExecAttach
FWI-2719: Enable new RBAC / sensitive content / Pod exec checks, add hasPrefix and hasSuffix functions to the GO template, exempt system: name prefixes for RBAC checks, sensitive content checks ignore valueFrom, (#832)
2022-11-14 15:05:02 -07:00
rolebindingRolePodExecAttach
FWI-2719: Enable new RBAC / sensitive content / Pod exec checks, add hasPrefix and hasSuffix functions to the GO template, exempt system: name prefixes for RBAC checks, sensitive content checks ignore valueFrom, (#832)
2022-11-14 15:05:02 -07:00
rolePodExecAttach
FWI-2719: Enable new RBAC / sensitive content / Pod exec checks, add hasPrefix and hasSuffix functions to the GO template, exempt system: name prefixes for RBAC checks, sensitive content checks ignore valueFrom, (#832)
2022-11-14 15:05:02 -07:00
runAsPrivileged
Pod level testing (#546)
2021-05-25 12:59:28 -04:00
runAsRootAllowed
[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821)
2022-09-15 12:38:22 -04:00
sensitiveConfigmapContent
FWI-2509: Add sensitiveContainerEnvVar and sensitiveConfigMapContent checks (#817)
2022-08-05 11:58:57 -04:00
sensitiveContainerEnvVar
FWI-2719: Enable new RBAC / sensitive content / Pod exec checks, add hasPrefix and hasSuffix functions to the GO template, exempt system: name prefixes for RBAC checks, sensitive content checks ignore valueFrom, (#832)
2022-11-14 15:05:02 -07:00
tagNotSpecified
add failure, failure.latest and success.yaml file (#541)
2021-05-18 12:40:55 -07:00
tlsSettingsMissing
Add support for arbitrary Kinds (#505)
2021-03-26 08:29:59 -04:00
topologySpreadConstraint
Fix #547 - add a check for topologySpreadConstraint (#879)
2023-01-04 14:05:23 -07:00