UNPKG

@pulumi/kubernetes-compliance-policies

Version:

This repository contains a growing set of Compliance Policies to validate your infrastructure using Pulumi's Crossguard Policy-as-Code framework.

44 lines (43 loc) 1.47 kB
import { ResourceValidationPolicy } from "@pulumi/policy"; declare namespace CronJob { /** * Checks that Kubernetes CronJobs have the recommended labels. * * @severity low * @frameworks none * @topics usability * @link https://kubernetes.io/docs/concepts/overview/working-with-objects/common-labels/ */ const configureRecommendedLabels: ResourceValidationPolicy; /** * Checks that Kubernetes CronJobs run pods with a read-only filesystem. * * @severity high * @frameworks iso27001, pcidss * @topics runtime, security * @link https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ */ const enableReadOnlyRootFilesystem: ResourceValidationPolicy; } export { CronJob }; declare namespace Job { /** * Checks that Kubernetes Jobs have the recommended labels. * * @severity low * @frameworks none * @topics usability * @link https://kubernetes.io/docs/concepts/overview/working-with-objects/common-labels/ */ const configureRecommendedLabels: ResourceValidationPolicy; /** * Checks that Kubernetes Jobs run pods with a read-only filesystem. * * @severity high * @frameworks iso27001, pcidss * @topics runtime, security * @link https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ */ const enableReadOnlyRootFilesystem: ResourceValidationPolicy; } export { Job };