-
-
Notifications
You must be signed in to change notification settings - Fork 174
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Split "Container Security Context" #325
Labels
Comments
Hi! I would start implementing this feature, if there is not someone else who has already started with implementing. |
@markuslackner I don't know of anyone else that has started to implement this, so feel free to go ahead! 👍 |
markuslackner
pushed a commit
to markuslackner/kube-score
that referenced
this issue
Nov 4, 2020
…for security context probe Fixes zegl#325
markuslackner
pushed a commit
to markuslackner/kube-score
that referenced
this issue
Nov 4, 2020
…for security context probe Fixes zegl#325
markuslackner
pushed a commit
to markuslackner/kube-score
that referenced
this issue
Nov 4, 2020
…for security context probe Fixes zegl#325
markuslackner
pushed a commit
to markuslackner/kube-score
that referenced
this issue
Nov 4, 2020
…for security context probe Fixes zegl#325
markuslackner
pushed a commit
to markuslackner/kube-score
that referenced
this issue
Nov 4, 2020
…for security context probe Fixes zegl#325
markuslackner
pushed a commit
to markuslackner/kube-score
that referenced
this issue
Nov 4, 2020
…for security context probe Fixes zegl#325
markuslackner
pushed a commit
to markuslackner/kube-score
that referenced
this issue
Nov 4, 2020
…for security context probe Fixes zegl#325
markuslackner
pushed a commit
to markuslackner/kube-score
that referenced
this issue
Nov 4, 2020
…for security context probe Fixes zegl#325
markuslackner
pushed a commit
to markuslackner/kube-score
that referenced
this issue
Nov 4, 2020
…for security context probe Fixes zegl#325
bors bot
added a commit
that referenced
this issue
Nov 7, 2020
326: score/security: added optional, splitted probes as future replacemnt … r=zegl a=markuslackner …for security context probe Fixes #325 ``` RELNOTE: container-security-context now deprecated and added optional probes container-security-context-user-group-id, container-security-context-privileged and container-security-context-readonlyrootfilesystem as replacement ``` Co-authored-by: Markus Lackner <markus.lackner@tetraeder.at>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
As shown in #204, there's a need to being able to disable the UID and GID checks of the "Container Security Context" check without disabling the other checks that are made. I'm therefore proposing to split this check into three separate ones:
Keeping all 3+1 versions around would not be desirable, and I'm proposing to use a three setup rollout plan:
The text was updated successfully, but these errors were encountered: