mountds

Documentation

Index

• Constants
• type DockerSockMounted
  • func New() *DockerSockMounted
  • func (limits *DockerSockMounted) Audit(resource k8stypes.Resource, _ []k8stypes.Resource) ([]*kubeaudit.AuditResult, error)

Constants

const (
	// DockerSocketMounted occurs when a container has Docker socket mounted
	DockerSocketMounted = "DockerSocketMounted"
)

const DockerSocketPath = "/var/run/docker.sock"

DockerSocketPath is the mount path of the Docker socket

const Name = "mountds"

Types

type DockerSockMounted

type DockerSockMounted struct{}

DockerSockMounted implements Auditable

func New

func New() *DockerSockMounted

func (*DockerSockMounted) Audit

func (limits *DockerSockMounted) Audit(resource k8stypes.Resource, _ []k8stypes.Resource) ([]*kubeaudit.AuditResult, error)

Audit checks that the container does not have the Docker socket mounted