This repository has been archived by the owner on Feb 26, 2019. It is now read-only.
-
Notifications
You must be signed in to change notification settings - Fork 6
/
configmap.yaml
107 lines (107 loc) · 2.95 KB
/
configmap.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
apiVersion: v1
kind: ConfigMap
metadata:
name: {{.Release.Name}}-default-policy
labels:
app: {{ template "anchore-policy-validator.fullname" . }}
data:
default-policy.json: |-
{
"id": "0a869a39-1b20-4ce7-bc00-3a7d88271f08",
"version": "1_0",
"name": "AnchoreUserDefault",
"policies": [
{
"comment": "",
"id": "b4b551ce-376e-455d-9c2b-51ff6d0ab07c",
"name": "default",
"rules": [
{
"action": "WARN",
"gate": "DOCKERFILECHECK",
"id": "ce7b8000-829b-4c27-8122-69cd59018400",
"params": [
{
"name": "DENIEDPORTS",
"value": "22"
}
],
"trigger": "EXPOSE"
},
{
"action": "WARN",
"gate": "DOCKERFILECHECK",
"id": "312d9e41-1c05-4e2f-ad89-b7d34b0855bb",
"params": [],
"trigger": "NOHEALTHCHECK"
},
{
"action": "WARN",
"gate": "ANCHORESEC",
"id": "6b5c14e7-a6f7-48cc-99d2-959273a2c6fa",
"params": [
{
"name": "MAXAGE",
"value": "2"
}
],
"trigger": "FEEDOUTOFDATE"
},
{
"action": "WARN",
"gate": "ANCHORESEC",
"id": "3e79ea94-18c4-4d26-9e29-3b9172a62c2e",
"params": [],
"trigger": "UNSUPPORTEDDISTRO"
},
{
"action": "WARN",
"gate": "ANCHORESEC",
"id": "6063fdde-b1c5-46af-973a-915739451ac4",
"params": [],
"trigger": "VULNMEDIUM"
},
{
"action": "WARN",
"gate": "ANCHORESEC",
"id": "b30e8abc-444f-45b1-8a37-55be1b8c8bb5",
"params": [],
"trigger": "VULNHIGH"
},
{
"action": "STOP",
"gate": "ANCHORESEC",
"id": "295adc9f-28b9-4aab-a5d6-833cf7727db7",
"params": [],
"trigger": "VULNCRITICAL"
}
],
"version": "1_0"
}
],
"whitelists": [
{
"comment": "Default Global Whitelist",
"id": "912937b6-05fb-472f-bfbe-834c3562f32d",
"items": [],
"name": "Global Whitelist",
"version": "1_0"
}
],
"mappings": [
{
"id": "c4f9bf74-dc38-4ddf-b5cf-00e9c0074611",
"image": {
"type": "tag",
"value": "*"
},
"name": "default",
"policy_id": "b4b551ce-376e-455d-9c2b-51ff6d0ab07c",
"registry": "*",
"repository": "*",
"whitelist_ids": [
"912937b6-05fb-472f-bfbe-834c3562f32d"
]
}
]
}