Control: StatefulSet containers should not run with root privileges
Description
Containers in a StatefulSet should not run with root privileges. By default, many container services run as the privileged root user, and applications execute inside the container as root despite not requiring privileged execution. Preventing root execution by using non-root containers or a rootless container engine limits the impact of a container compromise.
Usage
Run the control in your terminal:
powerpipe control run kubernetes_compliance.control.statefulset_non_root_containerSnapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run kubernetes_compliance.control.statefulset_non_root_container --shareSQL
This control uses a named query:
statefulset_non_root_container