Control: Job containers should minimize its admission with capabilities assigned
Description
This check ensures that the container in the Job minimizes its admission with capabilities assigned.
Usage
Run the control in your terminal:
powerpipe control run kubernetes_compliance.control.job_container_capabilities_drop_all
Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run kubernetes_compliance.control.job_container_capabilities_drop_all --share
SQL
This control uses a named query:
job_container_capabilities_drop_all