Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Set security context for polaris #360

Merged

Conversation

mlevesquedion
Copy link
Contributor

This PR adds SecurityContexts to the polaris Job in order to run the job with the least amount of privilege possible, in partial fulfillment of #163.

I ran the job with and without the changes in a local kind cluster and I did not see a difference in the output.

To obtain the output, I ran:

kubectl create deployment nginx --image nginx:1.16
kubectl wait --for=condition=available deploy/nginx --timeout=60s
./bin/starboard scan configauditreports deployment/nginx
./bin/starboard get configaudit deployment/nginx -o yaml >cars.yaml

@codecov
Copy link

codecov bot commented Jan 23, 2021

Codecov Report

Merging #360 (5f23290) into main (ab281e4) will increase coverage by 0.16%.
The diff coverage is 100.00%.

Impacted file tree graph

@@            Coverage Diff             @@
##             main     #360      +/-   ##
==========================================
+ Coverage   66.35%   66.52%   +0.16%     
==========================================
  Files          58       58              
  Lines        3026     3041      +15     
==========================================
+ Hits         2008     2023      +15     
  Misses        769      769              
  Partials      249      249              
Impacted Files Coverage Δ
pkg/polaris/plugin.go 91.17% <100.00%> (+1.09%) ⬆️

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update ab281e4...5f23290. Read the comment docs.

@mlevesquedion mlevesquedion force-pushed the set-security-context-for-polaris branch from 69fa837 to b4297c4 Compare January 24, 2021 01:16
@mlevesquedion mlevesquedion force-pushed the set-security-context-for-polaris branch from b4297c4 to 5f23290 Compare January 24, 2021 01:17
@danielpacak danielpacak self-requested a review January 25, 2021 08:11
Copy link
Contributor

@danielpacak danielpacak left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM! Thank you @mlevesquedion !

@danielpacak danielpacak merged commit 9f94deb into aquasecurity:main Jan 25, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants