Grégoire Martini 9b5438d864 Fix: rolebindingRolePodExecAttach check (#1070) ...

* Fix: rolebindingRolePodExecAttach check

Fix the case of a RoleBinding that points to a ClusterRole.
In that case, we ignore the RoleBinding since it will be evaluated by the rolebindingClusterRolePodExecAttach check.

* add tests for role-binding that uses a cluster-role binding

---------

Co-authored-by: Vitor Vezani <vitor.vezani@fairwinds.com>

2024-10-02 10:43:24 -06:00

..

failure.all_wildcards.yaml

FWI-2547: Add checks for RBAC allowing execing or attaching to a Pod (#820)

2022-08-23 12:09:44 -06:00

failure.attach_explicit.yaml

FWI-2547: Add checks for RBAC allowing execing or attaching to a Pod (#820)

2022-08-23 12:09:44 -06:00

failure.attach_using_verb_wildcard.yaml

FWI-2547: Add checks for RBAC allowing execing or attaching to a Pod (#820)

2022-08-23 12:09:44 -06:00

failure.binding_points_to_missing_ref.yaml

FWI-2547: Add checks for RBAC allowing execing or attaching to a Pod (#820)

2022-08-23 12:09:44 -06:00

failure.binding_to_system_prefix.yaml

FWI-2719: Enable new RBAC / sensitive content / Pod exec checks, add hasPrefix and hasSuffix functions to the GO template, exempt system: name prefixes for RBAC checks, sensitive content checks ignore valueFrom, (#832)

2022-11-14 15:05:02 -07:00

failure.create_attach_and_exec_using_resource_wildcard.yaml

FWI-2547: Add checks for RBAC allowing execing or attaching to a Pod (#820)

2022-08-23 12:09:44 -06:00

failure.create_attach_using_apigroup_wildcard.yaml

FWI-2547: Add checks for RBAC allowing execing or attaching to a Pod (#820)

2022-08-23 12:09:44 -06:00

failure.create_exec_using_apigroup_wildcard.yaml

FWI-2547: Add checks for RBAC allowing execing or attaching to a Pod (#820)

2022-08-23 12:09:44 -06:00

failure.exec_explicit.yaml

FWI-2547: Add checks for RBAC allowing execing or attaching to a Pod (#820)

2022-08-23 12:09:44 -06:00

failure.exec_verb_wildcard.yaml

FWI-2547: Add checks for RBAC allowing execing or attaching to a Pod (#820)

2022-08-23 12:09:44 -06:00

failure.get_attach_and_exec_using_resource_wildcard.yaml

FWI-2547: Add checks for RBAC allowing execing or attaching to a Pod (#820)

2022-08-23 12:09:44 -06:00

failure.get_attach_using_apigroup_wildcard.yaml

FWI-2547: Add checks for RBAC allowing execing or attaching to a Pod (#820)

2022-08-23 12:09:44 -06:00

failure.get_exec_using_apigroup_wildcard.yaml

FWI-2547: Add checks for RBAC allowing execing or attaching to a Pod (#820)

2022-08-23 12:09:44 -06:00

success.allow_unrelated_perms.yaml

FWI-2547: Add checks for RBAC allowing execing or attaching to a Pod (#820)

2022-08-23 12:09:44 -06:00

success.attach_wrong_verb.yaml

FWI-2547: Add checks for RBAC allowing execing or attaching to a Pod (#820)

2022-08-23 12:09:44 -06:00

success.binding_references_role.yaml

FWI-2547: Add checks for RBAC allowing execing or attaching to a Pod (#820)

2022-08-23 12:09:44 -06:00

success.exec_wrong_verb.yaml

FWI-2547: Add checks for RBAC allowing execing or attaching to a Pod (#820)

2022-08-23 12:09:44 -06:00

success.gce_calico_binding.yaml

FWI-2719: Enable new RBAC / sensitive content / Pod exec checks, add hasPrefix and hasSuffix functions to the GO template, exempt system: name prefixes for RBAC checks, sensitive content checks ignore valueFrom, (#832)

2022-11-14 15:05:02 -07:00

success.role_binding_cluster_role_binding.yaml

Fix: rolebindingRolePodExecAttach check (#1070)

2024-10-02 10:43:24 -06:00

success.role_with_no_cluster_roles.yaml

fix: conditional expressions should be at very top of additionalSchemaStrings (#1025)

2024-01-03 14:17:04 -06:00

success.system_prefix_binding.yaml

FWI-2719: Enable new RBAC / sensitive content / Pod exec checks, add hasPrefix and hasSuffix functions to the GO template, exempt system: name prefixes for RBAC checks, sensitive content checks ignore valueFrom, (#832)

2022-11-14 15:05:02 -07:00