jdesouza 2b17c31957 INS-1251: Polaris: upgrade github.com/qri-io/jsonschema to v0.2.1 (#1135) ...

* Bump lins

* Code refactoring

* Fixign issues

* Fixing issues

* Fixing issues

* Fixing issues

* [WIP]

* [WIP]

* [WIP]

* Trying to fix tests

* Trying to fix tests

* Fixing issues

* Fixing issues

* Fixing issues

* Fixing issues

* Fixing issues

* Fixing issues

* Revert go mod

* Revert go mod

* Revert go mod

* Revert go mod

* Fixing issues

* Fixing issue

* Code refactoring

* Updating json schema version

* Updating json schema version

2025-07-24 13:46:37 -03:00

..

automountServiceAccountToken

Minor fixes for NSA checks (#952)

2023-06-09 12:35:36 -06:00

clusterrolebindingClusterAdmin

FWI-2719: Enable new RBAC / sensitive content / Pod exec checks, add hasPrefix and hasSuffix functions to the GO template, exempt system: name prefixes for RBAC checks, sensitive content checks ignore valueFrom, (#832)

2022-11-14 15:05:02 -07:00

clusterrolebindingPodExecAttach

FWI-2719: Enable new RBAC / sensitive content / Pod exec checks, add hasPrefix and hasSuffix functions to the GO template, exempt system: name prefixes for RBAC checks, sensitive content checks ignore valueFrom, (#832)

2022-11-14 15:05:02 -07:00

clusterrolePodExecAttach

FWI-2719: Enable new RBAC / sensitive content / Pod exec checks, add hasPrefix and hasSuffix functions to the GO template, exempt system: name prefixes for RBAC checks, sensitive content checks ignore valueFrom, (#832)

2022-11-14 15:05:02 -07:00

cpuLimitsMissing

…

cpuRequestsMissing

…

dangerousCapabilities

…

deploymentMissingReplicas

…

hostIPCSet

…

hostNetworkSet

…

hostPathSet

INSIGHTS-475 Add 3 new checks to polaris (#1082)

2024-11-13 08:24:37 -03:00

hostPIDSet

…

hostPortSet

…

hostProcess

INSIGHTS-475 Add 3 new checks to polaris (#1082)

2024-11-13 08:24:37 -03:00

hpaMaxAvailability

INSIGHTS-90 - implement HPA minAvailable and HPA maxAvailable checks (#1053)

2024-06-26 17:31:35 -03:00

hpaMinAvailability

INSIGHTS-90 - implement HPA minAvailable and HPA maxAvailable checks (#1053)

2024-06-26 17:31:35 -03:00

insecureCapabilities

Minor fixes for NSA checks (#952)

2023-06-09 12:35:36 -06:00

linuxHardening

…

livenessProbeMissing

…

memoryLimitsMissing

…

memoryRequestsMissing

…

metadataAndInstanceMismatched

change kubernetes.io/ label from name to instance (#973)

2023-07-13 11:33:15 -06:00

missingNetworkPolicy

…

missingPodDisruptionBudget

INSIGHTS-156 - Fix typo and improve failure message (#1055)

2024-06-27 17:10:21 -03:00

nakedPod

INS-1251: Polaris: upgrade github.com/qri-io/jsonschema to v0.2.1 (#1135)

2025-07-24 13:46:37 -03:00

notReadOnlyRootFilesystem

…

oneController

INS-1251: Polaris: upgrade github.com/qri-io/jsonschema to v0.2.1 (#1135)

2025-07-24 13:46:37 -03:00

pdbDisruptionsIsZero

fix typo for minAvailable and maxAvailable (#1050)

2024-06-03 16:53:13 -03:00

pdbMinAvailableGreaterThanHPAMinReplicas

fixed pdbMinAvailableGreaterThanHPAMinReplicas and added validation for pdbMinAvailableEqualToHPAMinReplicas. (#1073)

2025-04-14 11:36:32 -03:00

priorityClassNotSet

…

privilegeEscalationAllowed

…

procMount

INSIGHTS-475 Add 3 new checks to polaris (#1082)

2024-11-13 08:24:37 -03:00

pullPolicyNotAlways

…

readinessProbeMissing

…

resourceRange

INS-1251: Polaris: upgrade github.com/qri-io/jsonschema to v0.2.1 (#1135)

2025-07-24 13:46:37 -03:00

rolebindingClusterAdminClusterRole

fix: conditional expressions should be at very top of additionalSchemaStrings (#1025)

2024-01-03 14:17:04 -06:00

rolebindingClusterAdminRole

FWI-2719: Enable new RBAC / sensitive content / Pod exec checks, add hasPrefix and hasSuffix functions to the GO template, exempt system: name prefixes for RBAC checks, sensitive content checks ignore valueFrom, (#832)

2022-11-14 15:05:02 -07:00

rolebindingClusterRolePodExecAttach

fix: conditional expressions should be at very top of additionalSchemaStrings (#1025)

2024-01-03 14:17:04 -06:00

rolebindingRolePodExecAttach

Fix: rolebindingRolePodExecAttach check (#1070)

2024-10-02 10:43:24 -06:00

rolePodExecAttach

FWI-2719: Enable new RBAC / sensitive content / Pod exec checks, add hasPrefix and hasSuffix functions to the GO template, exempt system: name prefixes for RBAC checks, sensitive content checks ignore valueFrom, (#832)

2022-11-14 15:05:02 -07:00

runAsPrivileged

…

runAsRootAllowed

…

sensitiveConfigmapContent

…

sensitiveContainerEnvVar

FWI-2719: Enable new RBAC / sensitive content / Pod exec checks, add hasPrefix and hasSuffix functions to the GO template, exempt system: name prefixes for RBAC checks, sensitive content checks ignore valueFrom, (#832)

2022-11-14 15:05:02 -07:00

tagNotSpecified

…

tlsSettingsMissing

…

topologySpreadConstraint

Update topologySpreadConstraint.yaml (#971)

2023-08-28 08:49:08 -06:00