Control: Pod containers should minimize its admission with capabilities assigned
Description
This check ensures that the container in the Pod minimizes its admission with capabilities assigned.
Usage
Run the control in your terminal:
powerpipe control run kubernetes_compliance.control.pod_container_capabilities_drop_allSnapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run kubernetes_compliance.control.pod_container_capabilities_drop_all --shareSQL
This control uses a named query:
pod_container_capabilities_drop_all