Added another chec

FairwindsOps · Nov 12, 2024 · e22a93f · e22a93f
1 parent f701195
commit e22a93f
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 24 deletions.
diff --git a/pkg/config/checks/procMount.yaml b/pkg/config/checks/procMount.yaml
@@ -1,7 +1,7 @@
 successMessage: The default /proc masks are set up to reduce attack surface, and should be required
 failureMessage: Proc mount must not be changed from the default
 category: Security
-target: PodSpec
+target: Container
 schema:
   '$schema': http://json-schema.org/draft-07/schema
   type: object
@@ -17,26 +17,3 @@ schema:
               procMount:
                 type: string
                 const: Default
-    initContainers:
-      type: array
-      items:
-        type: object
-        properties:
-          securityContext:
-            type: object
-            properties:
-              procMount:
-                type: string
-                const: Default
-    ephemeralContainers:
-      type: array
-      items:
-        type: object
-        properties:
-          securityContext:
-            type: object
-            properties:
-              procMount:
-                type: string
-                const: Default
-
diff --git a/test/webhook_cases/passing_test.daemonset.v1beta2.yaml b/test/webhook_cases/passing_test.daemonset.v1beta2.yaml
@@ -39,5 +39,9 @@ spec:
       terminationGracePeriodSeconds: 30
       volumes:
       - name: varlog
+        hostPath:
+          path: /var/log
       - name: varlibdockercontainers
+        hostPath:
+          path: /var/lib/docker/containers