turbot/kubernetes_compliance

Control: Replication Controller containers should minimize the admission of containers with added capability

Description

Container in Replication Controller should minimize the admission of containers with added capability. Adding capabilities to container increases the risk of container breakout.

Usage

Run the control in your terminal:

powerpipe control run kubernetes_compliance.control.replication_controller_container_with_added_capabilities

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run kubernetes_compliance.control.replication_controller_container_with_added_capabilities --share

SQL

This control uses a named query:

replication_controller_container_with_added_capabilities

Tags