Control: DaemonSet containers should minimize its admission with capabilities assigned
Description
This check ensures that the container in the DaemonSet minimizes its admission with capabilities assigned.
Usage
Run the control in your terminal:
powerpipe control run kubernetes_compliance.control.daemonset_container_capabilities_drop_allSnapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run kubernetes_compliance.control.daemonset_container_capabilities_drop_all --shareSQL
This control uses a named query:
daemonset_container_capabilities_drop_all