redhat-cop/rego-policies

Disable privileged containers

garethahealy opened this issue 5 years ago · 2 comments

garethahealy commented 5 years ago

Parent: #23
Suggestion: https://learnk8s.io/production-best-practices#application-development
Solved By: TODO

garethahealy commented 5 years ago

I'd expect the policy to be similar to:

https://github.com/redhat-cop/rego-policies/blob/1.0.0/policy/ocp/bestpractices/pod-hostnetwork/src.rego

garethahealy commented 4 years ago

SCCs in OCP cover/stop this, so not sure what the benefit would be in adding this policy.