Merge pull request #626 from kubescape/fix_c-0264

feat: Update storage class path in pv-without-encryption rule
kubescape · Jun 4, 2024 · d2c245c · d2c245c
2 parents 138fa85 + 31eee67
commit d2c245c
Show file tree

Hide file tree

Showing 2 changed files with 27 additions and 2 deletions.
diff --git a/rules/pv-without-encryption/raw.rego b/rules/pv-without-encryption/raw.rego
@@ -18,7 +18,7 @@ deny[msga] {
 		"packagename": "armo_builtins",
 		"failedPaths": [],
 		"fixPaths": [{
-			"path": "pv.spec.storageClassName",
+			"path": "spec.storageClassName",
 			"value": "<your encrypted storage class>"
         }],
 		"alertScore": 7,

diff --git a/rules/pv-without-encryption/test/eks/expected.json b/rules/pv-without-encryption/test/eks/expected.json
@@ -1 +1,26 @@
-[{"alertMessage":"Volume 'pvc-0eeeeefe-5193-472c-a81e-104f3919130e' has is using a storage class that does not use encryption","failedPaths":[],"fixPaths":[{"path":"pv.spec.storageClassName","value":"\u003cyour encrypted storage class\u003e"}],"ruleStatus":"","packagename":"armo_builtins","alertScore":7,"alertObject":{"k8sApiObjects":[{"apiVersion":"v1","kind":"PersistentVolume","metadata":{"name":"pvc-0eeeeefe-5193-472c-a81e-104f3919130e"}}]}}]
+[
+    {
+        "alertMessage": "Volume 'pvc-0eeeeefe-5193-472c-a81e-104f3919130e' has is using a storage class that does not use encryption",
+        "failedPaths": [],
+        "fixPaths": [
+            {
+                "path": "spec.storageClassName",
+                "value": "\u003cyour encrypted storage class\u003e"
+            }
+        ],
+        "ruleStatus": "",
+        "packagename": "armo_builtins",
+        "alertScore": 7,
+        "alertObject": {
+            "k8sApiObjects": [
+                {
+                    "apiVersion": "v1",
+                    "kind": "PersistentVolume",
+                    "metadata": {
+                        "name": "pvc-0eeeeefe-5193-472c-a81e-104f3919130e"
+                    }
+                }
+            ]
+        }
+    }
+]