Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[New Rule] Api server first automated rule (1.2.2) #11

Merged
merged 12 commits into from
Nov 22, 2021

Conversation

oren-zohar
Copy link
Collaborator

@oren-zohar oren-zohar commented Nov 16, 2021

API Server current input example:

{
  "type": "api_server",
  "command": "kube-apiserver --allow-privileged=true",
}

security-team#2015

General repo struct refactor
Split common test function from k8s test data function file
compliance/lib/data_adapter.rego Outdated Show resolved Hide resolved
compliance/cis_k8s/rules/cis_1_2_2/rule.rego Outdated Show resolved Hide resolved
compliance/cis_k8s/rules/cis_1_2_2/rule.rego Outdated Show resolved Hide resolved
@@ -9,3 +9,9 @@ filesystem_input(filename, mode, uid, gid) = {
"uid": uid,
"gid": gid,
}

# Recivies an array of arguments representing the API Server command
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

if you don't mind - change the file name to test_utils.rego same goes with package
(leave that refactor to the backlog)

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'll do it in a separate PR after all other rules are merged

@kfirpeled kfirpeled linked an issue Nov 22, 2021 that may be closed by this pull request
@kfirpeled kfirpeled linked an issue Nov 22, 2021 that may be closed by this pull request
@oren-zohar oren-zohar requested a review from kfirpeled November 22, 2021 16:16
@oren-zohar oren-zohar merged commit 2dbd5cd into main Nov 22, 2021
@oren-zohar oren-zohar deleted the api-server-first-rule branch November 22, 2021 17:44
orestisfl pushed a commit to orestisfl/csp-security-policies that referenced this pull request Oct 12, 2023
elastic#11


---NOTE---
This is an imported commit, it was initially committed to the
csp-security-policies repo which was then merged into cloudbeat. See:
elastic/cloudbeat#1405
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

[csp task] 1.2 API Server rules
2 participants