Andrew Suderman e7eb079921 change kubernetes.io/ label from name to instance (#973) ...

* Fix #972 change label from name to instance

* Fix tests

* more references

* fix check

* Fix example config

2023-07-13 11:33:15 -06:00

..

automountServiceAccountToken.yaml

Minor fixes for NSA checks (#952)

2023-06-09 12:35:36 -06:00

clusterrolebindingClusterAdmin.yaml

Minor fixes for NSA checks (#952)

2023-06-09 12:35:36 -06:00

clusterrolebindingPodExecAttach.yaml

Minor fixes for NSA checks (#952)

2023-06-09 12:35:36 -06:00

clusterrolePodExecAttach.yaml

FWI-2719: Enable new RBAC / sensitive content / Pod exec checks, add hasPrefix and hasSuffix functions to the GO template, exempt system: name prefixes for RBAC checks, sensitive content checks ignore valueFrom, (#832)

2022-11-14 15:05:02 -07:00

cpuLimitsMissing.yaml

[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821)

2022-09-15 12:38:22 -04:00

cpuRequestsMissing.yaml

[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821)

2022-09-15 12:38:22 -04:00

dangerousCapabilities.yaml

Update dangerousCapabilities.yaml (#866)

2023-01-05 10:24:21 -07:00

deploymentMissingReplicas.yaml

Added more mutations and refactor test to test each mutation separately (#734)

2022-04-08 17:19:14 +03:00

hostIPCSet.yaml

Change target: Pod to target: PodSpec (#726)

2022-06-07 07:37:25 -06:00

hostNetworkSet.yaml

Change target: Pod to target: PodSpec (#726)

2022-06-07 07:37:25 -06:00

hostPIDSet.yaml

Change target: Pod to target: PodSpec (#726)

2022-06-07 07:37:25 -06:00

hostPortSet.yaml

[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821)

2022-09-15 12:38:22 -04:00

insecureCapabilities.yaml

[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821)

2022-09-15 12:38:22 -04:00

linuxHardening.yaml

FWI-2476: Add missingNetworkPolicy, automountServiceAccountToken, and linuxHardening checks (#816)

2022-08-05 09:44:18 -06:00

livenessProbeMissing.yaml

[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821)

2022-09-15 12:38:22 -04:00

memoryLimitsMissing.yaml

[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821)

2022-09-15 12:38:22 -04:00

memoryRequestsMissing.yaml

[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821)

2022-09-15 12:38:22 -04:00

metadataAndInstanceMismatched.yaml

change kubernetes.io/ label from name to instance (#973)

2023-07-13 11:33:15 -06:00

missingNetworkPolicy.yaml

FWI-2476: Add missingNetworkPolicy, automountServiceAccountToken, and linuxHardening checks (#816)

2022-08-05 09:44:18 -06:00

missingPodDisruptionBudget.yaml

Support multi-resource templates (#524)

2021-05-06 14:01:20 -04:00

notReadOnlyRootFilesystem.yaml

Enable pullPolicyNotAlways (#795)

2022-07-11 13:20:17 -04:00

pdbDisruptionsIsZero.yaml

change test for PDB disruptions (#620)

2021-08-31 11:40:36 -04:00

priorityClassNotSet.yaml

FWI-4307 - fix checks category (#964)

2023-06-21 12:08:49 -04:00

privilegeEscalationAllowed.yaml

[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821)

2022-09-15 12:38:22 -04:00

pullPolicyNotAlways.yaml

Add mutation field to imagePolicyNotAlways (#712)

2022-03-25 16:38:58 +03:00

readinessProbeMissing.yaml

[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821)

2022-09-15 12:38:22 -04:00

rolebindingClusterAdminClusterRole.yaml

FWI-2719: Enable new RBAC / sensitive content / Pod exec checks, add hasPrefix and hasSuffix functions to the GO template, exempt system: name prefixes for RBAC checks, sensitive content checks ignore valueFrom, (#832)

2022-11-14 15:05:02 -07:00

rolebindingClusterAdminRole.yaml

FWI-2719: Enable new RBAC / sensitive content / Pod exec checks, add hasPrefix and hasSuffix functions to the GO template, exempt system: name prefixes for RBAC checks, sensitive content checks ignore valueFrom, (#832)

2022-11-14 15:05:02 -07:00

rolebindingClusterRolePodExecAttach.yaml

FWI-2719: Enable new RBAC / sensitive content / Pod exec checks, add hasPrefix and hasSuffix functions to the GO template, exempt system: name prefixes for RBAC checks, sensitive content checks ignore valueFrom, (#832)

2022-11-14 15:05:02 -07:00

rolebindingRolePodExecAttach.yaml

FWI-2719: Enable new RBAC / sensitive content / Pod exec checks, add hasPrefix and hasSuffix functions to the GO template, exempt system: name prefixes for RBAC checks, sensitive content checks ignore valueFrom, (#832)

2022-11-14 15:05:02 -07:00

rolePodExecAttach.yaml

FWI-2719: Enable new RBAC / sensitive content / Pod exec checks, add hasPrefix and hasSuffix functions to the GO template, exempt system: name prefixes for RBAC checks, sensitive content checks ignore valueFrom, (#832)

2022-11-14 15:05:02 -07:00

runAsPrivileged.yaml

Change target: Pod to target: PodSpec (#726)

2022-06-07 07:37:25 -06:00

runAsRootAllowed.yaml

ensure path exists when adding mutations (#789)

2022-07-07 10:00:36 -04:00

sensitiveConfigmapContent.yaml

FWI-2509: Add sensitiveContainerEnvVar and sensitiveConfigMapContent checks (#817)

2022-08-05 11:58:57 -04:00

sensitiveContainerEnvVar.yaml

Minor fixes for NSA checks (#952)

2023-06-09 12:35:36 -06:00

tagNotSpecified.yaml

Recategorize the results into standard categories. (#434)

2020-11-04 10:17:37 -05:00

tlsSettingsMissing.yaml

Add support for arbitrary Kinds (#505)

2021-03-26 08:29:59 -04:00

topologySpreadConstraint.yaml

Fix #547 - add a check for topologySpreadConstraint (#879)

2023-01-04 14:05:23 -07:00