turbot/kubernetes_compliance

Control: Deployment containers should not use CAP_SYS_ADMIN linux capability

Description

This check ensures that the container in the Deployment does not use CAP_SYS_ADMIN Linux capability.

Usage

Run the control in your terminal:

powerpipe control run kubernetes_compliance.control.deployment_container_sys_admin_capability_disabled

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run kubernetes_compliance.control.deployment_container_sys_admin_capability_disabled --share

SQL

This control uses a named query:

deployment_container_sys_admin_capability_disabled

Tags