kubeeye/examples/tmp/rule.yaml

40 lines
614 B
YAML

checks:
#resource
#cpuLimitsMissing: warning
#image
# tagNotSpecified: danger
imageFromUnauthorizedRegistry: warning
#healthChecks
#livenessProbeMissing: warning
#network
# hostPortSet: warning
#security
# runningAsPrivileged: warning
customChecks:
imageFromUnauthorizedRegistry:
promptMessage: Image should not be from disallowed registry
category: Images
target: Container
schema:
'$schema': http://json-schema.org/draft-07/schema
type: object
properties:
image:
type: string
not:
pattern: ^quay.io