policyDefinitions/Kubernetes/container-allowed-capabilities/examples-violations/violation.yaml [1:16]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
apiVersion: v1
kind: Pod
metadata:
  name: opa-capability-bad
  labels:
    owner: me.agilebank.demo
spec:
  containers:
    - name: opa
      image: openpolicyagent/opa:0.9.2
      args:
        - "run"
        - "--server"
        - "--addr=localhost:8080"
      securityContext:
        capabilities:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



policyDefinitions/Kubernetes/container-disallowed-capabilities/examples-violations/violation.yaml [1:16]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
apiVersion: v1
kind: Pod
metadata:
  name: opa-capability-bad
  labels:
    owner: me.agilebank.demo
spec:
  containers:
    - name: opa
      image: openpolicyagent/opa:0.9.2
      args:
        - "run"
        - "--server"
        - "--addr=localhost:8080"
      securityContext:
        capabilities:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



