turbot/kubernetes_compliance

Control: DaemonSet containers should minimize its admission with capabilities assigned

Description

This check ensures that the container in the DaemonSet minimizes its admission with capabilities assigned.

Usage

Run the control in your terminal:

powerpipe control run kubernetes_compliance.control.daemonset_container_capabilities_drop_all

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run kubernetes_compliance.control.daemonset_container_capabilities_drop_all --share

SQL

This control uses a named query:

daemonset_container_capabilities_drop_all

Tags