turbot/kubernetes_compliance

Control: PodTemplate containers should not allow privilege escalation

Description

Containers in a PodTemplate should not allow privilege escalation. A container running with the `allowPrivilegeEscalation` flag set to true may have processes that can gain more privileges than their parent.

Usage

Run the control in your terminal:

powerpipe control run kubernetes_compliance.control.pod_template_container_privilege_escalation_disabled

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run kubernetes_compliance.control.pod_template_container_privilege_escalation_disabled --share

SQL

This control uses a named query:

pod_template_container_privilege_escalation_disabled

Tags