turbot/docker_compliance

Query: docker_info_user_namespace_support_enabled

Usage

powerpipe query docker_compliance.query.docker_info_user_namespace_support_enabled

Steampipe Tables

SQL

select
id as resource,
case
when exists (
select 1
from jsonb_array_elements(security_options) AS elem
where elem @> '"name=userns"'
) then 'ok'
else 'alarm'
end as status,
case
when exists (
select 1
from jsonb_array_elements(security_options) AS elem
where elem @> '"name=userns"'
) then name || ' user namespace support enabled.'
else name || ' user namespace support disabled.'
end as reason
, _ctx ->> 'connection_name' as connection_name
from
docker_info;

Controls

The query is being used by the following controls: