hostns

Documentation

Index

• Constants
• type HostNamespaces
  • func New() *HostNamespaces
  • func (a *HostNamespaces) Audit(resource k8s.Resource, _ []k8s.Resource) ([]*kubeaudit.AuditResult, error)

Constants

const (
	// NamespaceHostNetworkTrue occurs when hostNetwork is set to true in the container podspec
	NamespaceHostNetworkTrue = "NamespaceHostNetworkTrue"
	// NamespaceHostIPCTrue occurs when hostIPC is set to true in the container podspec
	NamespaceHostIPCTrue = "NamespaceHostIPCTrue"
	// NamespaceHostPIDTrue occurs when hostPID is set to true in the container podspec
	NamespaceHostPIDTrue = "NamespaceHostPIDTrue"
)

const HostIPCOverrideLabel = "allow-namespace-host-IPC"

const HostNetworkOverrideLabel = "allow-namespace-host-network"

const HostPIDOverrideLabel = "allow-namespace-host-PID"

const Name = "hostns"

Types

type HostNamespaces

type HostNamespaces struct{}

HostNamespaces implements Auditable

func New

func New() *HostNamespaces

func (*HostNamespaces) Audit

func (a *HostNamespaces) Audit(resource k8s.Resource, _ []k8s.Resource) ([]*kubeaudit.AuditResult, error)

Audit checks that hostNetwork, hostIPC and hostPID are set to false in container podSpecs