Comments (8)
Thanks @jclarksnps - after looking into this, it does look to be a bug. I have been able reproduce locally. I think the missing context here is that the securityContext is not set on the Container but it is set at the pod level. This is innate kube logic which is missing from polaris
(since the validator is only checking the config at the container level, and not referencing anything at the pod level for this check). I can file this as a bug and we'll look at fixing this up in the validation logic. Thanks for the note!!
from polaris.
Thanks!
from polaris.
#149 Linking
from polaris.
Thanks for fixing this, any eta on a release?
from polaris.
Hi @jclarksnps - I'll get back to you shortly on the timing 😃 - Thanks again!
from polaris.
@jclarksnps - I am planning on cutting a release tomorrow if that works for you! :)
from polaris.
Thanks! Yep, we'll deploy and check it out.
from polaris.
https://github.com/reactiveops/polaris/releases/tag/0.2.1 -- all set
thanks for your patience!
from polaris.
Related Issues (20)
- Display Polaris check context in details in Insights
- yaml scan
- Issue when running polaris as a Docker container HOT 4
- Support providing a URL for the --config argument for Dashboard Helm install HOT 1
- [chart] proposal: nodeselector should be set to linux by default HOT 3
- Error fetching Kubernetes resource with Dashboard when using k8s on docker desktop windows
- Polaris Helm Chart: Add optional element additionalExemptions HOT 1
- Polaris giving helm chart directory to helm as release name HOT 1
- polaris config should selectively override values instead of replacing entire config HOT 6
- topologySpreadConstraint check need some tweaking
- cpuLimits check should not be enabled by default HOT 6
- sensitiveContainerEnvVar check false positive? HOT 1
- rolePodExecAttach check is being performed against wrong object HOT 1
- errors when mutate enable
- Not able to determine which PodResults belong to each file when auditing a directory HOT 2
- automountServiceAccountToken check fails if no serviceAccountName configured HOT 3
- Add JUNIT format to CLI HOT 1
- looks like polaris doesn't support multiple values yaml file HOT 2
- metadataAndNameMismatched HOT 1
- Problem with numbers in resource check HOT 4
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from polaris.