rootfs

Documentation

Index

• Constants
• type ReadOnlyRootFilesystem
  • func New() *ReadOnlyRootFilesystem
  • func (a *ReadOnlyRootFilesystem) Audit(resource k8stypes.Resource, _ []k8stypes.Resource) ([]*kubeaudit.AuditResult, error)

Constants

const (
	// ReadOnlyRootFilesystemFalse occurs when readOnlyRootFilesystem is set to false in the container SecurityContext
	ReadOnlyRootFilesystemFalse = "ReadOnlyRootFilesystemFalse"
	// ReadOnlyRootFilesystemNil occurs when readOnlyRootFilesystem is not set in the container SecurityContext.
	// readOnlyRootFilesystem defaults to false so this is bad
	ReadOnlyRootFilesystemNil = "ReadOnlyRootFilesystemNil"
)

const Name = "rootfs"

const OverrideLabel = "allow-read-only-root-filesystem-false"

Types

type ReadOnlyRootFilesystem

type ReadOnlyRootFilesystem struct{}

ReadOnlyRootFilesystem implements Auditable

func New

func New() *ReadOnlyRootFilesystem

func (*ReadOnlyRootFilesystem) Audit

func (a *ReadOnlyRootFilesystem) Audit(resource k8stypes.Resource, _ []k8stypes.Resource) ([]*kubeaudit.AuditResult, error)

Audit checks that readOnlyRootFilesystem is set to true in every container's security context