@pulumi/kubernetes-compliance-policies
Version:
This repository contains a growing set of Compliance Policies to validate your infrastructure using Pulumi's Crossguard Policy-as-Code framework.
44 lines (43 loc) • 1.47 kB
TypeScript
import { ResourceValidationPolicy } from "@pulumi/policy";
declare namespace CronJob {
/**
* Checks that Kubernetes CronJobs have the recommended labels.
*
* @severity low
* @frameworks none
* @topics usability
* @link https://kubernetes.io/docs/concepts/overview/working-with-objects/common-labels/
*/
const configureRecommendedLabels: ResourceValidationPolicy;
/**
* Checks that Kubernetes CronJobs run pods with a read-only filesystem.
*
* @severity high
* @frameworks iso27001, pcidss
* @topics runtime, security
* @link https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
*/
const enableReadOnlyRootFilesystem: ResourceValidationPolicy;
}
export { CronJob };
declare namespace Job {
/**
* Checks that Kubernetes Jobs have the recommended labels.
*
* @severity low
* @frameworks none
* @topics usability
* @link https://kubernetes.io/docs/concepts/overview/working-with-objects/common-labels/
*/
const configureRecommendedLabels: ResourceValidationPolicy;
/**
* Checks that Kubernetes Jobs run pods with a read-only filesystem.
*
* @severity high
* @frameworks iso27001, pcidss
* @topics runtime, security
* @link https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
*/
const enableReadOnlyRootFilesystem: ResourceValidationPolicy;
}
export { Job };