turbot/kubernetes_compliance

Control: CronJob containers should not allow privilege escalation

Description

Containers in a CronJob should not allow privilege escalation. A container running with the `allowPrivilegeEscalation` flag set to true may have processes that can gain more privileges than their parent.

Usage

Run the control in your terminal:

powerpipe control run kubernetes_compliance.control.cronjob_container_privilege_escalation_disabled

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run kubernetes_compliance.control.cronjob_container_privilege_escalation_disabled --share

SQL

This control uses a named query:

cronjob_container_privilege_escalation_disabled

Tags