kind: ConfigMap
apiVersion: v1
metadata:
    name: polaris
    namespace: polaris
    selfLink: /api/v1/namespaces/polaris/configmaps/polaris
    uid: 9f39fc94-5916-11ea-8ab4-42010a8000a7
    resourceVersion: '19359237'
    creationTimestamp: '2020-02-27T04:07:08Z'
    labels:
        app: polaris
    annotations:
        kubectl.kubernetes.io/last-applied-configuration: >
            {"apiVersion":"v1","data":{"config.yaml":"resources:\n 
            cpuRequestsMissing: warning\n  cpuLimitsMissing: warning\n 
            memoryRequestsMissing: warning\n  memoryLimitsMissing:
            warning\nimages:\n  tagNotSpecified: error\nhealthChecks:\n 
            readinessProbeMissing: warning\n  livenessProbeMissing:
            warning\nnetworking:\n  hostNetworkSet: warning\n  hostPortSet:
            warning\nsecurity:\n  hostIPCSet: error\n  hostPIDSet: error\n 
            notReadOnlyRootFileSystem: warning\n  privilegeEscalationAllowed:
            error\n  runAsRootAllowed: warning\n  runAsPrivileged: error\n 
            capabilities:\n    error:\n      ifAnyAdded:\n        -
            SYS_ADMIN\n        - NET_ADMIN\n        - ALL\n    warning:\n     
            ifAnyAddedBeyond:\n        - CHOWN\n        - DAC_OVERRIDE\n       
            - FSETID\n        - FOWNER\n        - MKNOD\n        -
            NET_RAW\n        - SETGID\n        - SETUID\n        -
            SETFCAP\n        - SETPCAP\n        - NET_BIND_SERVICE\n        -
            SYS_CHROOT\n        - KILL\n        -
            AUDIT_WRITE\ncontrollers_to_scan:\n  - Deployments\n  -
            StatefulSets\n  - DaemonSets\n  - Jobs\n  - CronJobs\n  -
            ReplicationControllers\n"},"kind":"ConfigMap","metadata":{"annotations":{},"labels":{"app":"polaris"},"name":"polaris","namespace":"polaris"}}
data:
    config.yaml: |
        resources:
          cpuRequestsMissing: warning
          cpuLimitsMissing: warning
          memoryRequestsMissing: warning
          memoryLimitsMissing: warning
        images:
          tagNotSpecified: error
        healthChecks:
          readinessProbeMissing: warning
          livenessProbeMissing: warning
        networking:
          hostNetworkSet: warning
          hostPortSet: warning
        security:
          hostIPCSet: error
          hostPIDSet: error
          notReadOnlyRootFileSystem: warning
          privilegeEscalationAllowed: error
          runAsRootAllowed: warning
          runAsPrivileged: error
          capabilities:
            error:
              ifAnyAdded:
                - SYS_ADMIN
                - NET_ADMIN
                - ALL
            warning:
              ifAnyAddedBeyond:
                - CHOWN
                - DAC_OVERRIDE
                - FSETID
                - FOWNER
                - MKNOD
                - NET_RAW
                - SETGID
                - SETUID
                - SETFCAP
                - SETPCAP
                - NET_BIND_SERVICE
                - SYS_CHROOT
                - KILL
                - AUDIT_WRITE
        controllers_to_scan:
          - Deployments
          - StatefulSets
          - DaemonSets
          - Jobs
          - CronJobs
          - ReplicationControllers

