turbot/kubernetes_compliance

Control: ReplicationController containers should not allow privilege escalation

Description

Containers in a ReplicationController should not allow privilege escalation. A container running with the `allowPrivilegeEscalation` flag set to true may have processes that can gain more privileges than their parent.

Usage

Run the control in your terminal:

powerpipe control run kubernetes_compliance.control.replication_controller_container_privilege_escalation_disabled

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run kubernetes_compliance.control.replication_controller_container_privilege_escalation_disabled --share

SQL

This control uses a named query:

replication_controller_container_privilege_escalation_disabled

Tags