51 lines
802 B
Plaintext
51 lines
802 B
Plaintext
include::../common/summary.adoc[]
|
|
|
|
|
|
== Sensitive Code Example
|
|
[source,yaml]
|
|
----
|
|
apiVersion: v1
|
|
kind: Pod
|
|
metadata:
|
|
name: test
|
|
spec:
|
|
containers:
|
|
- image: k8s.gcr.io/test-webserver
|
|
name: test-container
|
|
volumeMounts:
|
|
- mountPath: /var/run/docker.sock
|
|
name: test-volume
|
|
volumes:
|
|
- name: test-volume
|
|
hostPath:
|
|
path: /var/run/docker.sock # Sensitive
|
|
type: Socket
|
|
----
|
|
|
|
== Compliant Solution
|
|
[source,yaml]
|
|
----
|
|
apiVersion: v1
|
|
kind: Pod
|
|
metadata:
|
|
name: test
|
|
spec:
|
|
containers:
|
|
- image: k8s.gcr.io/test-webserver
|
|
name: test-container
|
|
----
|
|
|
|
include::../common/see.adoc[]
|
|
|
|
|
|
ifdef::env-github,rspecator-view[]
|
|
|
|
'''
|
|
== Implementation Specification
|
|
(visible only on this page)
|
|
|
|
include::../common/message-highlighting.adoc[]
|
|
|
|
|
|
endif::env-github,rspecator-view[]
|