Query: PodTemplate containers should not have added capabilities

Description

Container in PodTemplate definition should not have added capabilities. Added capabilities can provide container processes with escalated privileges which can be used to access sensitive host resources or perform operations outside of the container.

Query

Tables used in this query:

• kubernetes_pod_template

Controls using this query:

• PodTemplate containers should not have added capabilities

SQL