Create pod-dummy.yaml #1
There are no files selected for viewing
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,16 @@ | ||
| # https://github.com/dennyzhang/cheatsheet-kubernetes-A4 | ||
| # https://cheatsheet.dennyzhang.com/kubernetes-yaml-templates | ||
| apiVersion: v1 | ||
|
There was a problem hiding this comment. Error Description: Apply security context to your pods and containers There was a problem hiding this comment. Error Description: Minimize the admission of root containers There was a problem hiding this comment. Error Description: Containers should run as a high UID to avoid host conflict There was a problem hiding this comment. Error Description: Ensure that the seccomp profile is set to docker/default or runtime/default There was a problem hiding this comment. Error Description: Ensure that Service Account Tokens are only mounted where necessary |
||
| kind: Pod | ||
| metadata: | ||
| name: dummy | ||
| namespace: default | ||
| labels: | ||
| env: test | ||
| spec: | ||
| containers: | ||
| - name: dummy | ||
|
There was a problem hiding this comment. Error Description: Containers should not run with allowPrivilegeEscalation There was a problem hiding this comment. Error Description: CPU limits should be set There was a problem hiding this comment. Error Description: CPU requests should be set There was a problem hiding this comment. Error Description: Apply security context to your pods and containers There was a problem hiding this comment. Error Description: Minimize the admission of containers with the NET_RAW capability There was a problem hiding this comment. Error Description: Image should use digest There was a problem hiding this comment. Error Description: Image Tag should be fixed - not latest or blank There was a problem hiding this comment. Error Description: Liveness Probe Should be Configured There was a problem hiding this comment. Error Description: Memory limits should be set There was a problem hiding this comment. Error Description: Memory requests should be set There was a problem hiding this comment. Error Description: Minimize the admission of containers with capabilities assigned There was a problem hiding this comment. Error Description: Use read-only filesystem for containers where possible There was a problem hiding this comment. Error Description: Readiness Probe Should be Configured |
||
| image: ubuntu | ||
| # image: busybox | ||
| args: [/bin/sh, -c, | ||
| 'i=0; while true; do echo "$i: $(date)"; i=$((i+1)); sleep 1; done'] | ||
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Error Description: The default namespace should not be used
Category: Kubernetes | Severity: INFO
Resource: Pod [dummy], lines: 3 - 16