removed pod level securityContext support (#790)

tenable · May 19, 2021 · bea2473 · bea2473
1 parent 636515e
commit bea2473
Showing 1 changed file with 0 additions and 20 deletions.
diff --git a/pkg/policies/opa/rego/k8s/kubernetes_pod/securityContextCheck.rego b/pkg/policies/opa/rego/k8s/kubernetes_pod/securityContextCheck.rego
@@ -27,11 +27,6 @@ package accurics
     checkCorrectAttribute(pod.config.spec)
 }
 
-{{.prefix}}{{.name}}{{.suffix}}[pod.id] {
-    pod := input.kubernetes_pod_security_policy[_]
-    podSecurityCheck(pod.config.spec)
-}
-
 checkCorrectAttribute(spec) {
     container := spec.containers[_]
     containerSecurityCheck(container)
@@ -42,11 +37,6 @@ checkCorrectAttribute(spec) {
     containerSecurityCheck(container)
 }
 
-checkCorrectAttribute(spec) {
-    secContext := spec.securityContext
-    podSecurityCheck(secContext)
-}
-
 containerSecurityCheck(container) {
 	{{.not_allowed}}
     container.{{.param1}}.{{.param}} == {{.value}}
@@ -64,13 +54,3 @@ containerSecurityCheck(container) {
 	{{.allowed}}
     not container.{{.param1}}.{{.arg1}}.{{.arg2}}
 }
-
-podSecurityCheck(secContext) {
-	{{.not_allowed}}
-    secContext.{{.param}} == {{.value}}
-}
-
-podSecurityCheck(secContext) {
-	{{.not_allowed}}
-    object.get(secContext, "{{.param}}", "undefined") == "undefined"
-}