github/polaris
1
0
Fork 0
mirror of https://github.com/FairwindsOps/polaris.git synced 2026-05-04 16:26:52 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
9.6.4
polaris/test/checks
History
youM d70591b1b8 fixed pdbMinAvailableGreaterThanHPAMinReplicas and added validation for pdbMinAvailableEqualToHPAMinReplicas. (#1073) 
* rename pdbMinAvailableGreaterThanHPAMinReplicas to pdbMinAvailableGreaterThanOrEqualToHPAMinReplicas

* modify doc

* Revert "modify doc"

This reverts commit faffffc298cde23a99c5e19528123f249d92d314.

* Revert "rename pdbMinAvailableGreaterThanHPAMinReplicas to pdbMinAvailableGreaterThanOrEqualToHPAMinReplicas"

This reverts commit b93f283acc279b90c7e7a9d8dbbe53b2f8ab9a31.

* fix test

* fix impl
2025-04-14 11:36:32 -03:00
..
automountServiceAccountToken
Minor fixes for NSA checks (#952)
2023-06-09 12:35:36 -06:00
clusterrolebindingClusterAdmin
FWI-2719: Enable new RBAC / sensitive content / Pod exec checks, add hasPrefix and hasSuffix functions to the GO template, exempt system: name prefixes for RBAC checks, sensitive content checks ignore valueFrom, (#832)
2022-11-14 15:05:02 -07:00
clusterrolebindingPodExecAttach
FWI-2719: Enable new RBAC / sensitive content / Pod exec checks, add hasPrefix and hasSuffix functions to the GO template, exempt system: name prefixes for RBAC checks, sensitive content checks ignore valueFrom, (#832)
2022-11-14 15:05:02 -07:00
clusterrolePodExecAttach
FWI-2719: Enable new RBAC / sensitive content / Pod exec checks, add hasPrefix and hasSuffix functions to the GO template, exempt system: name prefixes for RBAC checks, sensitive content checks ignore valueFrom, (#832)
2022-11-14 15:05:02 -07:00
cpuLimitsMissing
[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821)
2022-09-15 12:38:22 -04:00
cpuRequestsMissing
[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821)
2022-09-15 12:38:22 -04:00
dangerousCapabilities
[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821)
2022-09-15 12:38:22 -04:00
deploymentMissingReplicas
[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821)
2022-09-15 12:38:22 -04:00
hostIPCSet
[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821)
2022-09-15 12:38:22 -04:00
hostNetworkSet
[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821)
2022-09-15 12:38:22 -04:00
hostPathSet
INSIGHTS-475 Add 3 new checks to polaris (#1082)
2024-11-13 08:24:37 -03:00
hostPIDSet
[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821)
2022-09-15 12:38:22 -04:00
hostPortSet
[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821)
2022-09-15 12:38:22 -04:00
hostProcess
INSIGHTS-475 Add 3 new checks to polaris (#1082)
2024-11-13 08:24:37 -03:00
hpaMaxAvailability
INSIGHTS-90 - implement HPA minAvailable and HPA maxAvailable checks (#1053)
2024-06-26 17:31:35 -03:00
hpaMinAvailability
INSIGHTS-90 - implement HPA minAvailable and HPA maxAvailable checks (#1053)
2024-06-26 17:31:35 -03:00
insecureCapabilities
Minor fixes for NSA checks (#952)
2023-06-09 12:35:36 -06:00
linuxHardening
FWI-2476: Add missingNetworkPolicy, automountServiceAccountToken, and linuxHardening checks (#816)
2022-08-05 09:44:18 -06:00
livenessProbeMissing
[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821)
2022-09-15 12:38:22 -04:00
memoryLimitsMissing
[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821)
2022-09-15 12:38:22 -04:00
memoryRequestsMissing
[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821)
2022-09-15 12:38:22 -04:00
metadataAndInstanceMismatched
change kubernetes.io/ label from name to instance (#973)
2023-07-13 11:33:15 -06:00
missingNetworkPolicy
FWI-2476: Add missingNetworkPolicy, automountServiceAccountToken, and linuxHardening checks (#816)
2022-08-05 09:44:18 -06:00
missingPodDisruptionBudget
INSIGHTS-156 - Fix typo and improve failure message (#1055)
2024-06-27 17:10:21 -03:00
nakedPod
Change target: Pod to target: PodSpec (#726)
2022-06-07 07:37:25 -06:00
notReadOnlyRootFilesystem
update notReadOnlyRootFilesystem check (#543)
2021-05-24 15:21:04 -07:00
oneController
Change target: Pod to target: PodSpec (#726)
2022-06-07 07:37:25 -06:00
pdbDisruptionsIsZero
fix typo for minAvailable and maxAvailable (#1050)
2024-06-03 16:53:13 -03:00
pdbMinAvailableGreaterThanHPAMinReplicas
fixed pdbMinAvailableGreaterThanHPAMinReplicas and added validation for pdbMinAvailableEqualToHPAMinReplicas. (#1073)
2025-04-14 11:36:32 -03:00
priorityClassNotSet
…
privilegeEscalationAllowed
Pod level testing (#546)
2021-05-25 12:59:28 -04:00
procMount
INSIGHTS-475 Add 3 new checks to polaris (#1082)
2024-11-13 08:24:37 -03:00
pullPolicyNotAlways
[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821)
2022-09-15 12:38:22 -04:00
readinessProbeMissing
[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821)
2022-09-15 12:38:22 -04:00
resourceRange
Fix numerical resource ranges (#991)
2023-09-05 11:15:45 -06:00
rolebindingClusterAdminClusterRole
fix: conditional expressions should be at very top of additionalSchemaStrings (#1025)
2024-01-03 14:17:04 -06:00
rolebindingClusterAdminRole
FWI-2719: Enable new RBAC / sensitive content / Pod exec checks, add hasPrefix and hasSuffix functions to the GO template, exempt system: name prefixes for RBAC checks, sensitive content checks ignore valueFrom, (#832)
2022-11-14 15:05:02 -07:00
rolebindingClusterRolePodExecAttach
fix: conditional expressions should be at very top of additionalSchemaStrings (#1025)
2024-01-03 14:17:04 -06:00
rolebindingRolePodExecAttach
Fix: rolebindingRolePodExecAttach check (#1070)
2024-10-02 10:43:24 -06:00
rolePodExecAttach
FWI-2719: Enable new RBAC / sensitive content / Pod exec checks, add hasPrefix and hasSuffix functions to the GO template, exempt system: name prefixes for RBAC checks, sensitive content checks ignore valueFrom, (#832)
2022-11-14 15:05:02 -07:00
runAsPrivileged
Pod level testing (#546)
2021-05-25 12:59:28 -04:00
runAsRootAllowed
[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821)
2022-09-15 12:38:22 -04:00
sensitiveConfigmapContent
FWI-2509: Add sensitiveContainerEnvVar and sensitiveConfigMapContent checks (#817)
2022-08-05 11:58:57 -04:00
sensitiveContainerEnvVar
FWI-2719: Enable new RBAC / sensitive content / Pod exec checks, add hasPrefix and hasSuffix functions to the GO template, exempt system: name prefixes for RBAC checks, sensitive content checks ignore valueFrom, (#832)
2022-11-14 15:05:02 -07:00
tagNotSpecified
add failure, failure.latest and success.yaml file (#541)
2021-05-18 12:40:55 -07:00
tlsSettingsMissing
Add support for arbitrary Kinds (#505)
2021-03-26 08:29:59 -04:00
topologySpreadConstraint
Update topologySpreadConstraint.yaml (#971)
2023-08-28 08:49:08 -06:00