| Name | Ensure disallowed capabilities are not used in Kubernetes Cluster Community-Policy GitHub |
||
| Id | kubernetes_container-disallowed-capabilities | ||
| Version | 1.0.0-preview details on versioning |
||
| Category | Kubernetes PSP Microsoft docs |
||
| Description | This policy ensures specified security capabilities are not used inside a Kubernetes cluster. For instructions on using this policy, please visit https://aka.ms/kubepolicydoc. | ||
| Mode | Microsoft.Kubernetes.Data | ||
| Type | Custom Community | ||
| Effect | Default audit Allowed audit, deny, disabled |
||
| Used RBAC Role | none | ||
| Rule Aliases | |||
| Rule ResourceTypes | IF (1) Microsoft.ContainerService/managedClusters |
||
| JSON |
|