diff --git a/kubescape-exceptions.json b/kubescape-exceptions.json new file mode 100644 index 0000000000000000000000000000000000000000..11ae81866af5726d0b2de9672ac30fd7c0d2e79f --- /dev/null +++ b/kubescape-exceptions.json @@ -0,0 +1,29 @@ +[ + { + "name": "exclude-node-exporter-host-access-checks", + "policyType": "postureExceptionPolicy", + "actions": [ + "alertOnly" + ], + "resources": [ + { + "designatorType": "Attributes", + "attributes": { + "kind": "DaemonSet", + "name": "node-exporter" + } + } + ], + "posturePolicies": [ + { + "controlName": "Container hostPort" + }, + { + "controlName": "Host PID/IPC privileges" + }, + { + "controlName": "HostNetwork access" + } + ] + } +] \ No newline at end of file