Query: ReplicationController containers should run with a read only root file system

Description

Containers in a ReplicationController should always run with a read only root file system. Using an immutable root filesystem and a verified boot mechanism prevents against attackers from owning the machine through permanent local changes. An immutable root filesystem can also prevent malicious binaries from writing to the host system.

Query

Tables used in this query:

• kubernetes_replication_controller

Controls using this query:

• ReplicationController containers should run with a read only root file system

SQL