cel-admission-library

cel-admission-library copied to clipboard

amitschendel

Exemptions

1

Hello, just a quick question regarding these policies. They seem like a really good starting-point for an eventual native PSP re-implementation. Currently we are using Gatekeeper, with all of the...

technotaff-nbs

ValidatingAdmissionPolicy for C-0013

7

## Control C-0013 ### Related Resources: CronJob, DaemonSet, Deployment, Job, Pod, ReplicaSet, StatefulSet ### Control Docs: https://hub.armosec.io/docs/c-0013 ### Control Rego: https://github.com/kubescape/regolibrary/blob/master/rules/non-root-containers/raw.rego

suhasgumma

ValidatingAdmissionPolicy for C-0012

5

## Control C-0012 ### Related Resources: Workloads and ConfigMaps ### Control Docs: https://hub.armosec.io/docs/c-0012 ### Control Rego: * https://github.com/kubescape/regolibrary/blob/master/rules/rule-credentials-in-env-var/raw.rego * https://github.com/kubescape/regolibrary/blob/master/rules/rule-credentials-configmap/raw.rego

suhasgumma