Query: Pod Security Policy should prohibit hostPaths volumes

Description

The Pod Security Policy `allowedHostPaths` specifies a list of host paths that are allowed to be used by hostPath volumes. An empty list means there is no restriction on host paths used. This is defined as a list of objects with a single pathPrefix field, which allows hostPath volumes to mount a path that begins with an allowed prefix, and a readOnly field indicating it must be mounted read-only.

Query

Tables used in this query:

• kubernetes_pod_security_policy

Controls using this query:

• Pod Security Policy should prohibit hostPaths volumes

SQL