KubeLinter is a static analysis tool that checks Kubernetes YAML files and Helm charts to ensure the applications represented in them adhere to best practices.
Add SecurityContextConstraints objects parsing, and adds check of allowPrivilegedContainer: true what enabled privileged mode to attached objects.
Name: scc-deny-privileged-container
Description: Indicates when allowPrivilegedContainer SSC set to True
Remediation: SecurityContextConstraints has AllowPrivilegedContainer set to "true". Using this option is dangerous, please consider using allowedCapabilities instead
Template: scc-deny-privileged-container
Parameters: map[AllowPrivilegedContainer:true]
Enabled by default: false
resolves #649
Add SecurityContextConstraints objects parsing, and adds check of
allowPrivilegedContainer: true
what enabled privileged mode to attached objects.