https://github.com/kitagry/kubescore-rego

WIP
https://github.com/kitagry/kubescore-rego

Last synced: 13 days ago
JSON representation

WIP

• Host: GitHub
• URL: https://github.com/kitagry/kubescore-rego
• Owner: kitagry
• Created: 2021-09-07T07:06:27.000Z (about 3 years ago)
• Default Branch: main
• Last Pushed: 2021-12-31T05:37:40.000Z (almost 3 years ago)
• Last Synced: 2024-04-17T19:28:06.070Z (7 months ago)
• Language: Open Policy Agent
• Size: 19.5 KB
• Stars: 1
• Watchers: 2
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

README

        
## kubescore-rego

Inspired by [kube-score](https://github.com/zegl/kube-score).

### TODO

#### without combine

- [x] cronjob-has-deadline

- [x] container-resources

- [ ] container-resource-requests-equal-limits

- [ ] container-cpu-requests-equal-limits

- [ ] container-memory-requests-equal-limits

- [x] container-image-tag

- [x] container-image-pull-policy

- [ ] pod-networkpolicy

- [x] pod-probes

- [x] container-security-context

  - [x] user-group-id

  - [x] privileged

  - [x] readonlyrootfilesystem

- [ ] container-seccomp-profile

- [ ] service-type

- [ ] stable-version

- [x] has-host-podantiaffinity

  - [x] deployment

  - [x] statefulset

- [ ] statefulset-has-servicename

- [x] pod-selector-labels-match-template-metadata-labels

  - [x] deployment

  - [x] statefulset

- [ ] label-values

#### with combine

I don't know I will create the following.

- [ ] ingress-targets-service

- [ ] statefulset-has-poddisruptionbudget

- [ ] deployment-has-poddisruptionbudget

- [ ] networkpolicy-targets-pod

- [ ] service-targets-pod

- [ ] deployment-targeted-by-hpa-does-not-have-replicas-configured

- [ ] horizontalpodautoscaler-has-target