Query: cronjob_hostpid_hostipc_sharing_disabled

select
  coalesce(uid, concat(path, ':', start_line)) as resource,
  case
    when (job_template -> 'spec' -> 'template' -> 'spec' ->> 'hostPID')::bool
    or (job_template -> 'spec' -> 'template' -> 'spec' ->> 'hostIPC')::bool then 'alarm'
    else 'ok'
  end as status,
  case
    when (job_template -> 'spec' -> 'template' -> 'spec' ->> 'hostPID')::bool then 'CronJob pods share host pid namespaces.'
    when (job_template -> 'spec' -> 'template' -> 'spec' ->> 'hostIPC')::bool then 'CronJob pods share host ipc namespaces.'
    else 'CronJob pods cannot share host process namespaces.'
  end as reason,
  name as cronjob_name
  
  , coalesce(context_name, '') as context_name, namespace, source_type, coalesce(path || ':' || start_line || '-' || end_line, '') as path
from
  kubernetes_cronjob;