Control: PodTemplate containers should minimize its admission with capabilities assigned
Description
This check ensures that the container in the PodTemplate minimizes its admission with capabilities assigned.
Usage
Run the control in your terminal:
powerpipe control run kubernetes_compliance.control.pod_template_container_capabilities_drop_allSnapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run kubernetes_compliance.control.pod_template_container_capabilities_drop_all --shareSQL
This control uses a named query:
pod_template_container_capabilities_drop_all