mirrors/kyverno
mirrors/kyverno
1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2025-03-07 00:17:13 +00:00
Code Activity
kyverno/examples/best_practices
History
Shuting Zhao 4a43eef696 correct spelling
2019-09-18 12:31:14 -07:00
..
resources update best-practice run as non-root uesr 2019-09-17 18:36:24 -07:00
policy_mutate_pod_disable_automountingapicred.yaml add policies 2019-09-06 10:03:24 -07:00
policy_validate_container_disallow_priviledgedprivelegesecalation.yaml correct spelling 2019-09-18 12:31:14 -07:00
policy_validate_default_namespace.yaml add validate_namespace test runner 2019-09-09 14:33:55 -07:00
policy_validate_default_network_policy.yaml add policy_validate_namespace_quota.yaml - add policy_validate_default_network_policy.yaml 2019-09-09 23:38:16 -07:00
policy_validate_deny_runasrootuser.yaml update best-practice run as non-root uesr 2019-09-17 18:36:24 -07:00
policy_validate_disallow_default_serviceaccount.yaml add best-practice: policy_validate_disallow_default_serviceaccount 2019-09-16 14:16:54 -07:00
policy_validate_disallow_node_port.yaml add policy_validate_disallow_node_port.yaml 2019-09-10 11:57:33 -07:00
policy_validate_host_network_port.yaml update testrunner, unit test for validate_host_network_port 2019-09-09 16:08:15 -07:00
policy_validate_host_path.yaml upate readme links and remove duplicate policies 2019-09-08 10:41:07 -07:00
policy_validate_hostpid_hosipc.yaml Rename policy_validate_hostPID_hosIPC.yaml to policy_validate_hostpid_hosipc.yaml 2019-09-10 00:03:49 -07:00
policy_validate_image_latest_ifnotpresent_deny.yaml add policies 2019-09-06 10:03:24 -07:00
policy_validate_image_pullpolicy_notalways_deny.yaml add policies 2019-09-06 10:03:24 -07:00
policy_validate_image_registries.yaml upate readme links and remove duplicate policies 2019-09-08 10:41:07 -07:00
policy_validate_image_tag.yaml add policies 2019-09-06 10:03:24 -07:00
policy_validate_image_tag_latest_deny.yaml add policies 2019-09-06 10:03:24 -07:00
policy_validate_image_tag_notspecified_deny.yaml add policies 2019-09-06 10:03:24 -07:00
policy_validate_namespace_quota.yaml add policy_validate_namespace_quota.yaml - add policy_validate_default_network_policy.yaml 2019-09-09 23:38:16 -07:00
policy_validate_not_readonly_rootfilesystem.yaml add policy_validate_not_readonly_rootfilesystem.yaml 2019-09-09 18:13:38 -07:00
policy_validate_pod_probes.yaml add policies 2019-09-06 10:03:24 -07:00
README.md add best-practice: policy_validate_disallow_default_serviceaccount 2019-09-16 14:16:54 -07:00

README.md

Best Practice Policies

Best practice Policy
Run as non-root user policy_validate_deny_runasrootuser.yaml
Disallow privileged and privilege escalation policy_validate_container_disallow_priviledgedprivelegesecalation.yaml
Disallow use of host networking and ports policy_validate_host_network_port.yaml
Disallow use of host filesystem policy_validate_host_path.yaml
Disallow hostPID and hostIPC policy_validate_hostpid_hosipc.yaml
Require read only root filesystem policy_validate_not_readonly_rootfilesystem.yaml
Disallow node ports policy_validate_disallow_node_port.yaml
Allow trusted registries policy_validate_image_registries.yaml
Require resource requests and limits policy_validate_pod_resources.yaml
Require pod liveness and readiness probes policy_validate_pod_probes.yaml
Require an image tag policy_validate_image_tag_notspecified_deny.yaml
Disallow latest tag and pull IfNotPresent policy_validate_image_latest_ifnotpresent_deny.yaml
Require a namespace (disallow default) policy_validate_default_namespace.yaml
Disallow use of kube-system namespace
Prevent mounting of default service account policy_validate_disallow_default_serviceaccount.yaml
Require a default network policy policy_validate_default_network_policy.yaml
Require namespace quotas and limit ranges policy_validate_namespace_quota.yaml