GistPin/infrastructure/.kube-linter.yaml at main · ghzhost/GistPin · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
checks:
  doNotAutoAddDefaults: false
  include:
    - "no-read-only-root-fs"
    - "unset-cpu-requirements"
    - "unset-memory-requirements"
    - "no-liveness-probe"
    - "no-readiness-probe"
    - "no-node-selector"
    - "unsafe-proc-mount"
    - "run-as-non-root"
    - "writable-host-mount"
    - "no-anti-affinity"
    - "required-annotation-email"
    - "minimum-three-replicas"
    - "no-extensions-v1beta1"
    - "no-service-account"
  exclude:
    - "unset-cpu-requirements"
    - "unset-memory-requirements"

customChecks:
  - name: "no-latest-image-tag"
    template: "latest-tag"
    params:
      imageTag: "latest"
    remediation: "Use a specific image tag instead of 'latest'"
    scope:
      objectKinds:
        - DeploymentLike