Skip to main content

Rules

Rec
Enabled in recommended preset.
All
Disabled when components are given in CLI.

ban-namespace

Disallow namespaces which match the specified patterns.

ban-service-type

Disallow specific service types.

no-missing-config-map

Disallow missing ConfigMap references.

Rec
All

no-missing-gateway-class

Disallow missing GatewayClass references.

Rec
All

no-missing-gateway

Disallow missing Gateway references.

Rec
All

no-missing-namespace

Disallow missing Namespace references.

Rec
All

no-missing-pod-volume-mount

Disallow missing volume mounts in pods.

Rec

no-missing-pv

Disallow missing PersistentVolume references.

Rec
All

no-missing-pvc

Disallow missing PersistentVolumeClaim references.

Rec
All

no-missing-role

Disallow missing Role and ClusterRole references.

Rec
All

no-missing-scale-target

Disallow missing scale target references defined in auto scalers (e.g. HPA, VPA).

Rec
All

no-missing-secret

Disallow missing Secret references.

Rec
All

no-missing-service-account

Disallow missing ServiceAccount references.

Rec
All

no-missing-service

Disallow missing Service references.

Rec
All

no-replicas-with-hpa

Disallow replicas field when a resource has a HPA.

Rec
All

require-container-image

Require container images to be specified.

Rec

require-container-port-name

Require container port names to be specified.

require-container-resources

Require container resources to be specified.

require-env-name

Require environment variable names to be specified.

Rec

require-image-tag

Require image tags to be specified.

require-namespace

Require a namespace to be specified.

require-probe

Require container probes to be specified.

require-security-context

Require security context to be specified.

require-service-port-name

Require service port names to be specified.

Rec

require-service-selector

Require service selectors to be specified.

unique-container-name

Require container names to be unique within a pod.

Rec

unique-container-port-name

Require container port names to be unique within a pod.

Rec

unique-env-name

Require environment variable names to be unique within a container.

Rec

unique-service-port-name

Require service port names to be unique within a service.

Rec

valid-cron-job-schedule

Require cron job schedules to be valid.

Rec

valid-hpa-replicas

Require HPA replicas to be valid.

Rec

valid-pod-selector

Require deployment selector to equal or be a subset of the pod template labels.

Rec

valid-probe-port

Require string container probe ports to be defined in container ports.

Rec