Open
Description
In order to support Windows system, we should add rego rules to check for securityContext
parameters also for this OS.
Reading from the official documentation, we should implement a control for each of the following listed fields: https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.26/#windowssecuritycontextoptions-v1-core
So, the new checks to be added, are the following:
gmsaCredentialSpec
gmsaCredentialSpecName
hostProcess
runAsUserName
The equivalent rules should be named like so:
set-gmsacredentialspec-value
set-gmsacredentialspecname-value
set-hostprocess-true
(checking also ifWindowsHostProcessContainers
feature flag is enabled inapi-server
)runAsUserName
Metadata
Metadata
Assignees
Type
Projects
Status
Feature
Activity