Mark Stemm f14b37984c Add test for some containers being privileged ...

Add a test that verifies that a pod where one container has no security
context and the second container has a security context + privileged
properly matches the Create Privileged Pod falco rule.

There's a very similar test case already in
trace_files/k8s_audit/create_nginx_pod_privileged_2nd_container.json,
but in that case both containers have a securityContext property.

Signed-off-by: Mark Stemm <mark.stemm@gmail.com>

2021-04-09 10:34:48 +02:00

..

anonymous_creates_namespace_foo.json

K8s audit evts (#450)

2018-11-09 10:15:39 -08:00

attach_cluster_admin_role.json

K8s audit evts (#450)

2018-11-09 10:15:39 -08:00

attach_pod.json

K8s audit evts (#450)

2018-11-09 10:15:39 -08:00

CMakeLists.txt

build(test/traces_file/k8s_audit): target trace-files-k8s-audit

2020-07-20 22:48:00 +02:00

create_cluster_role_pod_exec.json

K8s audit evts (#450)

2018-11-09 10:15:39 -08:00

create_cluster_role_wildcard_resources.json

K8s audit evts (#450)

2018-11-09 10:15:39 -08:00

create_cluster_role_wildcard_verbs.json

K8s audit evts (#450)

2018-11-09 10:15:39 -08:00

create_cluster_role_write_privileges.json

K8s audit evts (#450)

2018-11-09 10:15:39 -08:00

create_clusterrole.json

K8s audit evts (#450)

2018-11-09 10:15:39 -08:00

create_clusterrolebinding.json

K8s audit evts (#450)

2018-11-09 10:15:39 -08:00

create_configmap_no_sensitive_values.json

K8s audit evts (#450)

2018-11-09 10:15:39 -08:00

create_configmap_sensitive_values.json

K8s audit evts (#450)

2018-11-09 10:15:39 -08:00

create_configmap.json

K8s audit evts (#450)

2018-11-09 10:15:39 -08:00

create_deployment.json

K8s audit evts (#450)

2018-11-09 10:15:39 -08:00

create_kube_system_secret.json

Only use metadata in k8s audit event for secrets

2020-04-22 21:00:38 +02:00

create_nginx_pod_hostnetwork.json

K8s audit evts (#450)

2018-11-09 10:15:39 -08:00

create_nginx_pod_no_secctx_1st_container_privileged_2nd_container.json

Add test for some containers being privileged

2021-04-09 10:34:48 +02:00

create_nginx_pod_nohostnetwork.json

K8s audit evts (#450)

2018-11-09 10:15:39 -08:00

create_nginx_pod_privileged_2nd_container.json

K8s audit evts (#450)

2018-11-09 10:15:39 -08:00

create_nginx_pod_privileged.json

K8s audit evts (#450)

2018-11-09 10:15:39 -08:00

create_nginx_pod_sensitive_mount_2nd_container.json

K8s audit evts (#450)

2018-11-09 10:15:39 -08:00

create_nginx_pod_sensitive_mount.json

K8s audit evts (#450)

2018-11-09 10:15:39 -08:00

create_nginx_pod_unprivileged.json

K8s audit evts (#450)

2018-11-09 10:15:39 -08:00

create_nginx_pod_unsensitive_mount.json

K8s audit evts (#450)

2018-11-09 10:15:39 -08:00

create_nginx_service_nodeport.json

K8s audit evts (#450)

2018-11-09 10:15:39 -08:00

create_nginx_service_nonodeport.json

K8s audit evts (#450)

2018-11-09 10:15:39 -08:00

create_pod_kube_public_namespace.json

K8s audit evts (#450)

2018-11-09 10:15:39 -08:00

create_pod_kube_system_namespace.json

K8s audit evts (#450)

2018-11-09 10:15:39 -08:00

create_secret.json

Only use metadata in k8s audit event for secrets

2020-04-22 21:00:38 +02:00

create_service_account_token_secret.json

Only use metadata in k8s audit event for secrets

2020-04-22 21:00:38 +02:00

create_service.json

K8s audit evts (#450)

2018-11-09 10:15:39 -08:00

create_serviceaccount_kube_public_namespace.json

K8s audit evts (#450)

2018-11-09 10:15:39 -08:00

create_serviceaccount_kube_system_namespace.json

K8s audit evts (#450)

2018-11-09 10:15:39 -08:00

create_serviceaccount.json

K8s audit evts (#450)

2018-11-09 10:15:39 -08:00

delete_cluster_role_kube_aggregator.json

K8s audit evts (#450)

2018-11-09 10:15:39 -08:00

delete_clusterrole.json

K8s audit evts (#450)

2018-11-09 10:15:39 -08:00

delete_clusterrolebinding.json

K8s audit evts (#450)

2018-11-09 10:15:39 -08:00

delete_configmap.json

K8s audit evts (#450)

2018-11-09 10:15:39 -08:00

delete_deployment.json

K8s audit evts (#450)

2018-11-09 10:15:39 -08:00

delete_namespace_foo.json

K8s audit evts (#450)

2018-11-09 10:15:39 -08:00

delete_secret.json

Only use metadata in k8s audit event for secrets

2020-04-22 21:00:38 +02:00

delete_service.json

K8s audit evts (#450)

2018-11-09 10:15:39 -08:00

delete_serviceaccount.json

K8s audit evts (#450)

2018-11-09 10:15:39 -08:00

exec_pod.json

K8s audit evts (#450)

2018-11-09 10:15:39 -08:00

minikube_creates_namespace_foo.json

K8s audit evts (#450)

2018-11-09 10:15:39 -08:00

modify_cluster_role_node_problem_detector.json

K8s audit evts (#450)

2018-11-09 10:15:39 -08:00

some-user_creates_namespace_foo.json

K8s audit evts (#450)

2018-11-09 10:15:39 -08:00