Query: StatefulSet containers should run with a read only root file system

Description

Containers in a StatefulSet should always run with a read only root file system. Using an immutable root filesystem and a verified boot mechanism prevents against attackers from owning the machine through permanent local changes. An immutable root filesystem can also prevent malicious binaries from writing to the host system.

Query

Tables used in this query:

• kubernetes_stateful_set

Controls using this query:

• StatefulSet containers should run with a read only root file system

SQL