Control: StatefulSet containers should minimize the admission of containers with added capability
Description
Container in StatefulSet should minimize the admission of containers with added capability. Adding capabilities to container increases the risk of container breakout.
Usage
Run the control in your terminal:
powerpipe control run kubernetes_compliance.control.statefulset_container_with_added_capabilitiesSnapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run kubernetes_compliance.control.statefulset_container_with_added_capabilities --shareSQL
This control uses a named query:
statefulset_container_with_added_capabilities