Navigation Menu

Skip to content

Release v0.1.1

Compare
Choose a tag to compare
@gambol99 gambol99 released this 19 May 18:14
· 1069 commits to master since this release
753d89a

Features

Introduced the ability for the platform administrators to enforce a security profile against the terraform modules.

apiVersion: terraform.appvia.io/v1alpha1
kind: Policy
metadata:
  name: checkov
spec:
  constraints:
    checkov:
      # See: https://www.checkov.io/5.Policy%20Index/terraform.html
      checks: []
      # See: https://www.checkov.io/5.Policy%20Index/terraform.html
      skipChecks: []

Where necessary an exception can be added, targetting by namespace and resource labels; which will override the above.

---
# Create an exception to the above policy and force configurations
# in the specific namespace to use this instead
---
apiVersion: terraform.appvia.io/v1alpha1
kind: Policy
metadata:
  name: checkov-override
spec:
  constraints:
    checkov:
      selector:
        namespace:
          matchExpressions:
            - key: kubernetes.io/metadata.name
              operator: In
              values: [apps2]
      # See: https://www.checkov.io/5.Policy%20Index/terraform.html
      skipChecks:
        - <NAME>

What's Changed

Full Changelog: v0.1.0...v0.1.1