kubescape-exceptions.json

[
  {
    "name": "exclude-automountServiceAccountToken-checks",
    "policyType": "postureExceptionPolicy",
    "actions": ["alertOnly"],
    "resources": [
      {
        "designatorType": "Attributes",
        "attributes": {
          "kind": "DaemonSet",
          "name": "test-prometheus-node-exporter"
        }
      },
      {
        "designatorType": "Attributes",
        "attributes": {
          "kind": "Deployment",
          "name": "test-kube-state-metrics"
        }
      },
      {
        "designatorType": "Attributes",
        "attributes": {
          "kind": "Deployment",
          "name": "tobs-kube-prometheus-operator"
        }
      },
      {
        "designatorType": "Attributes",
        "attributes": {
          "kind": "ServiceAccount",
          "name": "test-grafana-test"
        }
      },
      {
        "designatorType": "Attributes",
        "attributes": {
          "kind": "ServiceAccount",
          "name": "test-test-datasource"
        }
      },
      {
        "designatorType": "Attributes",
        "attributes": {
          "kind": "ServiceAccount",
          "name": "test-prometheus-node-exporter"
        }
      },
      {
        "designatorType": "Attributes",
        "attributes": {
          "kind": "Pod",
          "name": "test-grafana-test"
        }
      },
      {
        "designatorType": "Attributes",
        "attributes": {
          "kind": "Job",
          "name": "test-kube-prometheus-stack-admission-patch"
        }
      },
      {
        "designatorType": "Attributes",
        "attributes": {
          "kind": "Deployment",
          "name": "test-grafana"
        }
      },
      {
        "designatorType": "Attributes",
        "attributes": {
          "kind": "ServiceAccount",
          "name": "test-kube-prometheus-stack-prometheus"
        }
      },
      {
        "designatorType": "Attributes",
        "attributes": {
          "kind": "Deployment",
          "name": "test-promscale"
        }
      },
      {
        "designatorType": "Attributes",
        "attributes": {
          "kind": "ServiceAccount",
          "name": "test-kube-prometheus-stack-admission-patch"
        }
      }
    ],
    "posturePolicies": [
      {
        "controlName": "Automatic mapping of service account"
      }
    ]
  },
  {
    "name": "exclude-resource-limits-checks",
    "policyType": "postureExceptionPolicy",
    "actions": ["alertOnly"],
    "resources": [
      {
        "designatorType": "Attributes",
        "attributes": {
          "kind": "DaemonSet"
        }
      },
      {
        "designatorType": "Attributes",
        "attributes": {
          "kind": "StatefulSet"
        }
      },
      {
        "designatorType": "Attributes",
        "attributes": {
          "kind": "Deployment"
        }
      },
      {
        "designatorType": "Attributes",
        "attributes": {
          "kind": "Job"
        }
      },
      {
        "designatorType": "Attributes",
        "attributes": {
          "kind": "Pod"
        }
      }
    ],
    "posturePolicies": [
      {
        "controlName": "Resource policies"
      }
    ]
  },
  {
    "name": "exclude-node-exporter-host-access-checks",
    "policyType": "postureExceptionPolicy",
    "actions": ["alertOnly"],
    "resources": [
      {
        "designatorType": "Attributes",
        "attributes": {
          "kind": "DaemonSet",
          "name": "test-prometheus-node-exporter"
        }
      }
    ],
    "posturePolicies": [
      {
        "controlName": "Container hostPort"
      },
      {
        "controlName": "Host PID/IPC privileges"
      },
      {
        "controlName": "HostNetwork access"
      }
    ]
  },
  {
    "name": "exclude-credentials-in-configuration-file-tests",
    "policyType": "postureExceptionPolicy",
    "actions": ["alertOnly"],
    "resources": [
      {
        "designatorType": "Attributes",
        "attributes": {
          "kind": "ConfigMap",
          "name": "test-test-datasource"
        }
      },
      {
        "designatorType": "Attributes",
        "attributes": {
          "kind": "ConfigMap",
          "name": "test-connection-initializer"
        }
      },
      {
        "designatorType": "Attributes",
        "attributes": {
          "kind": "ConfigMap",
          "name": "test-timescaledb-patroni"
        }
      }
    ],
    "posturePolicies": [
      {
        "controlName": "Applications credentials in configuration files"
      }
    ]
  }
]