Merge pull request #65 from nirmata/enforce-to-audit-mode

fix: change enforce policies to audit
nirmata · May 12, 2023 · 9525d24 · 9525d24
2 parents 555cabd + 84cb5d1
commit 9525d24
Show file tree

Hide file tree

Showing 6 changed files with 6 additions and 6 deletions.
diff --git a/best-practices/disallow-empty-ingress-host/disallow_empty_ingress_host.yaml b/best-practices/disallow-empty-ingress-host/disallow_empty_ingress_host.yaml
@@ -12,7 +12,7 @@ metadata:
       in order to be valid. This policy ensures that there is a
       hostname for each rule defined.
 spec:
-  validationFailureAction: enforce
+  validationFailureAction: audit
   background: false
   rules:
     - name: disallow-empty-ingress-host

diff --git a/charts/best-practices-k8s/Chart.yaml b/charts/best-practices-k8s/Chart.yaml
@@ -2,7 +2,7 @@ apiVersion: v2
 name: kubernetes-best-practice-policies
 description: Kubernetes Best Practice policy set
 type: application
-version: 0.1.1
+version: 0.1.2
 appVersion: 0.1.0
 keywords:
   - kubernetes

diff --git a/charts/best-practices-k8s/pols/disallow_empty_ingress_host.yaml b/charts/best-practices-k8s/pols/disallow_empty_ingress_host.yaml
@@ -12,7 +12,7 @@ metadata:
       in order to be valid. This policy ensures that there is a
       hostname for each rule defined.
 spec:
-  validationFailureAction: enforce
+  validationFailureAction: audit
   background: false
   rules:
     - name: disallow-empty-ingress-host

diff --git a/charts/best-practices-workload-security/Chart.yaml b/charts/best-practices-workload-security/Chart.yaml
@@ -2,7 +2,7 @@ apiVersion: v2
 name: workload-security-best-practice-policies
 description: Workload Security Best Practice policy set
 type: application
-version: 0.1.1
+version: 0.1.2
 appVersion: 0.1.0
 keywords:
   - kubernetes

diff --git a/charts/best-practices-workload-security/pols/disallow_empty_ingress_host.yaml b/charts/best-practices-workload-security/pols/disallow_empty_ingress_host.yaml
@@ -12,7 +12,7 @@ metadata:
       in order to be valid. This policy ensures that there is a
       hostname for each rule defined.
 spec:
-  validationFailureAction: enforce
+  validationFailureAction: audit
   background: false
   rules:
     - name: disallow-empty-ingress-host

diff --git a/pci-dss/restrict-basic-auth-secret.yaml b/pci-dss/restrict-basic-auth-secret.yaml
@@ -13,7 +13,7 @@ metadata:
       Namespaces so Pods there have access. This policy will check for
       the username and password present in a secret.
 spec:
-  validationFailureAction: Enforce
+  validationFailureAction: audit
   background: true
   rules:
   - name: check-secrets