privileged

Documentation

Index

• Constants
• type Privileged
  • func New() *Privileged
  • func (a *Privileged) Audit(resource k8s.Resource, _ []k8s.Resource) ([]*kubeaudit.AuditResult, error)

Constants

const (
	// PrivilegedTrue occurs when privileged is set to true in the container SecurityContext
	PrivilegedTrue = "PrivilegedTrue"
	// PrivilegedNil occurs when privileged is not set in the container SecurityContext.
	// Privileged defaults to false so this is ok
	PrivilegedNil = "PrivilegedNil"
)

const Name = "privileged"

const OverrideLabel = "allow-privileged"

Types

type Privileged

type Privileged struct{}

Privileged implements Auditable

func New

func New() *Privileged

func (*Privileged) Audit

func (a *Privileged) Audit(resource k8s.Resource, _ []k8s.Resource) ([]*kubeaudit.AuditResult, error)

Audit checks that privileged is set to false in every container's security context