Query: cronjob_hostpid_hostipc_sharing_disabled

select
  coalesce(uid, concat(path, ':', start_line)) as resource,
  case
    when (
      job_template -> 'spec' -> 'template' -> 'spec' ->> 'hostPID'
    ) :: bool
    or (
      job_template -> 'spec' -> 'template' -> 'spec' ->> 'hostIPC'
    ) :: bool then 'alarm'
    else 'ok'
  end as status,
  case
    when (
      job_template -> 'spec' -> 'template' -> 'spec' ->> 'hostPID'
    ) :: bool then 'CronJob pods share host pid namespaces.'
    when (
      job_template -> 'spec' -> 'template' -> 'spec' ->> 'hostIPC'
    ) :: bool then 'CronJob pods share host ipc namespaces.'
    else 'CronJob pods cannot share host process namespaces.'
  end as reason,
  name as cronjob_name,
  coalesce(context_name, '') as context_name,
  namespace,
  source_type,
  coalesce(path || ':' || start_line || '-' || end_line, '') as path
from
  kubernetes_cronjob;