- Fixed missing success messages for resource requests/limits
- Added a few more exemptions
- Started checking exemptions based on controller name prefix
runAsUser != 0
now passes therunAsNonRoot
check
- Added
--load-audit-file
flag to run the dashboard from an existing audit - Added an
ID
field to each check in the output - Skip health checks for jobs, cronjobs, initcontainers
- Added support for exemptions
- Fixed dashboard base path option
- Added additional Pod Controllers to scan PodSpec (
jobs
,cronjobs
,daemonsets
,replicationcontrollers
)
- Changed dashboard branding to refer to new org name Fairwinds
- Added
--set-exit-code-on-error
and--set-exit-code-below-score
flags to better support CI/CD
- Fix: Fixed logic on RunAsNonRoot check to incorporate settings in podSpec
- Added
--output-format
flag for better CI/CD support - Added
--display-name
flag - Added support for StatefulSets
- Show error message if no kubeconfig is set
- Fix: details pages getting template errors
- Fix: support all auth providers
- Fix: Ignore readiness probe for initContainers
- Fix: dashboard not updating when running persistently
- Stored all third-party assets (e.g. Charts.js) to local files to support offline dashboard viewing
- Fix: custom configs in
ConfigMap
not respected
- Fix: missing
config.yaml
and dashboard assets in binary releases - Added some tests and better error handling
- Dashboard fully functional
- Validating webhook functional, but still considered beta
- Checks:
- Health
- readiness probe missing
- liveness probe missing
- Images
- tag not specified
- pull policy not always
- Networking
- host network set
- host port set
- Resources
- cpu/memory requests missing
- cpu/memory limits missing
- cpu/memory ranges exceeded
- Security
- security capabilities
- host IPC set
- host PID set
- not read-only fs
- privilege escalation allowed
- run as root allowed
- run as privileged
- Health