123 commits

Author	SHA1	Message	Date
Jim Bugwadia	c1be682a93	update require_pod_requests_limits	2019-11-10 21:06:49 -08:00
Jim Bugwadia	f668113904	update add_ns_quota	2019-11-10 20:58:57 -08:00
Jim Bugwadia	a6d5fb6e30	update restrict_image_registries	2019-11-10 18:13:01 -08:00
Jim Bugwadia	f31abbffab	update disallow_latest_tag	2019-11-10 17:54:38 -08:00
Jim Bugwadia	7f54e8e2e3	Merge branch '451_fix_disallow_host_net_port' into 452_make_sample_policy_rule_names_consistent ... # Conflicts: # samples/best_practices/disallow_host_network_hostport.yaml # test/scenarios/samples/best_practices/disallow_host_network_port.yaml	2019-11-10 17:35:43 -08:00
Jim Bugwadia	0fa95d71d0	use negation anchor	2019-11-10 16:12:47 -08:00
Jim Bugwadia	20736e5e81	update disallow_default_namespace and disallow_host_network_port and disallow_host_pid_ipc	2019-11-10 15:50:18 -08:00
Jim Bugwadia	170e2a5179	update disallow_docker_sock_mount and disallow_host_network_port	2019-11-10 12:53:48 -08:00
Jim Bugwadia	fd1a26db29	update DisallowBindMounts	2019-11-09 16:33:19 -08:00
Jim Bugwadia	fae8ac0325	update RequireReadOnlyRootFS	2019-11-09 16:18:33 -08:00
Jim Bugwadia	121b81a83b	update disallow new capabilities	2019-11-09 16:07:16 -08:00
Jim Bugwadia	4e848b48a2	add category and description	2019-11-08 20:08:23 -08:00
Jim Bugwadia	cba79c69a2	update disallow_priviledged	2019-11-08 20:04:42 -08:00
Jim Bugwadia	5ce8fd7a9a	update disallow_root_user	2019-11-08 19:25:43 -08:00
Jim Bugwadia	6baa678e27	rename add_safe_to_evict	2019-11-08 19:02:49 -08:00
Jim Bugwadia	a0d3f728da	fix disallow_host_network_hostport policy	2019-11-08 18:26:58 -08:00
Jim Bugwadia	ab2e671df5	update test scenario and change rule to audit mode	2019-11-07 19:28:48 -08:00
Jim Bugwadia	43e76e1237	fix policy	2019-11-07 19:03:09 -08:00
shivkumar dudhani	f33650a335	update name	2019-11-06 15:55:55 -08:00
Jim Bugwadia	1173e062c9	- add policy and test for known ingress ... - fix messages and remove unnecessary comments in testrunner/scenario.go	2019-11-05 19:07:44 -08:00
Jim Bugwadia	cd3e0f46f3	add policy doc	2019-11-05 16:45:37 -08:00
Jim Bugwadia	cab87f24ba	add tect case	2019-11-05 15:32:45 -08:00
Shuting Zhao	664a85363a	correct scenario test	2019-11-05 12:59:22 -08:00
Jim Bugwadia	5ded29f74e	temp update for debugging	2019-11-05 12:28:44 -08:00
Shuting Zhao	764d0fede2	Merge commit '35bed4bc6aef6622b89f0fc4dee9a175aa9768ff' into 158_array_validation	2019-11-05 09:50:32 -08:00
Shivkumar Dudhani	cfbd212093	Merge pull request #427 from nirmata/375_handle_json_numbers_resubmit ... 375 handle json numbers resubmit	2019-11-04 18:05:24 -08:00
Jim Bugwadia	35bed4bc6a	add safe-to-evict annotation	2019-11-04 17:55:13 -08:00
Jim Bugwadia	41afefbe8e	add disallow Helm tiller	2019-11-03 18:19:06 -08:00
Jim Bugwadia	3b1143c934	Merge pull request #436 from nirmata/411_no_docker_sock_mount ... 411 no docker sock mount	2019-11-01 15:38:40 -07:00
shivkumar dudhani	a191bd67f4	update message string	2019-11-01 15:21:23 -07:00
Jim Bugwadia	1323a9a81e	add policy and test case	2019-11-01 15:19:26 -07:00
Jim Bugwadia	8ddd9f036f	Merge branch 'master' into 410_no_new_capabilities	2019-11-01 14:53:56 -07:00
Jim Bugwadia	4fbc57bfed	update policy and test case	2019-11-01 14:37:17 -07:00
Jim Bugwadia	aa6b65480a	updated policy	2019-11-01 11:47:29 -07:00
Jim Bugwadia	eebfab87e5	add YAML and description	2019-10-31 18:40:54 -07:00
shivkumar dudhani	ea9bfe32cb	update the policy	2019-10-31 13:29:16 -07:00
Shivkumar Dudhani	92c96aaf1f	Revert "use validatepattern in generate rule to check for subset existance"	2019-10-31 13:21:38 -07:00
shivkumar dudhani	61c1ea5a49	use validatepattern in generate rule to check for subset existance	2019-10-31 13:04:56 -07:00
shuting	a0f5419430	Merge pull request #416 from nirmata/158_array_validation ... update link to import policies	2019-10-30 13:20:39 -07:00
Jim Bugwadia	3438e84013	fix YAML syntax	2019-10-30 13:12:29 -07:00
Jim Bugwadia	3783ae0495	update policy	2019-10-30 12:59:51 -07:00
Shuting Zhao	f25a336eeb	- update doc; -remove duplicate policy	2019-10-30 12:29:57 -07:00
shivkumar dudhani	90575e1067	update policy	2019-10-24 18:48:48 -05:00
shivkumar dudhani	6b7b50f7af	fix generate format	2019-10-24 12:37:52 -05:00
Shuting Zhao	c6d5ec7575	Merge commit '82647670a54ead965c8cb964f3063409d0826070' into 337_policy_description ... # Conflicts: # pkg/testrunner/testrunner_test.go # samples/README.md # samples/best_practices/policy_validate_deny_runasrootuser.yaml # test/scenarios/samples/best_practices/scenario_validate_nonRootUser.yaml	2019-10-15 12:27:22 -07:00
Shuting Zhao	da57501dcd	update description format	2019-10-14 16:33:19 -07:00
shivkumar dudhani	d98ba1ab1a	remove audit flag, as its default behavior	2019-10-14 14:17:07 -07:00
Shuting Zhao	61808837fb	update description	2019-10-14 13:58:47 -07:00
Shuting Zhao	4d2bcef411	remove duplicate	2019-10-14 13:50:00 -07:00
Shuting Zhao	75806146c6	Merge branch 'best_practice_policies' into 337_policy_description ... # Conflicts: # samples/README.md	2019-10-14 13:21:10 -07:00