Merge #295

295: score/networkpolicy: improved copy for pod-has-networkpolicy errors r=zegl a=zegl



Co-authored-by: Gustav Westling <gustav@westling.dev>

score/networkpolicy/networkpolicy.go

@@ -68,13 +68,13 @@ func podHasNetworkPolicy(allNetpols []networkingv1.NetworkPolicy) func(spec core
 			score.Grade = scorecard.GradeAllOK
 		} else if hasMatchingEgressNetpol && !hasMatchingIngressNetpol {
 			score.Grade = scorecard.GradeWarning
-			score.AddComment("", "The pod does not have a matching ingress network policy", "Add a egress policy to the pods NetworkPolicy")
+			score.AddComment("", "The pod does not have a matching ingress NetworkPolicy", "Add a ingress policy to the pods NetworkPolicy")
 		} else if hasMatchingIngressNetpol && !hasMatchingEgressNetpol {
 			score.Grade = scorecard.GradeWarning
-			score.AddComment("", "The pod does not have a matching egress network policy", "Add a ingress policy to the pods NetworkPolicy")
+			score.AddComment("", "The pod does not have a matching egress NetworkPolicy", "Add a egress policy to the pods NetworkPolicy")
 		} else {
 			score.Grade = scorecard.GradeCritical
-			score.AddComment("", "The pod does not have a matching network policy", "Create a NetworkPolicy that targets this pod")
+			score.AddComment("", "The pod does not have a matching NetworkPolicy", "Create a NetworkPolicy that targets this pod to control who/what can communicate with this pod. Note, this feature needs to be supported by the CNI implementation used in the Kubernetes cluster to have an effect.")
 		}
 
 		return