diff --git a/.github/workflows/docs.yaml b/.github/workflows/docs.yaml index b438783b..debd7659 100644 --- a/.github/workflows/docs.yaml +++ b/.github/workflows/docs.yaml @@ -28,4 +28,4 @@ jobs: exit 1 - name: Link checker - uses: gaurav-nelson/github-action-markdown-link-check@9710f0fec812ce0a3b98bef4c9d842fc1f39d976 # 1.0.13 \ No newline at end of file + uses: gaurav-nelson/github-action-markdown-link-check@d53a906aa6b22b8979d33bc86170567e619495ec # 1.0.15 \ No newline at end of file diff --git a/POLICIES.md b/POLICIES.md index a482098c..bddf0732 100755 --- a/POLICIES.md +++ b/POLICIES.md @@ -31,29 +31,29 @@ * [RHCOP-OCP_BESTPRACT-00025: Route has TLS Termination Defined](#rhcop-ocp_bestpract-00025-route-has-tls-termination-defined) * [RHCOP-OCP_BESTPRACT-00026: Pod anti-affinity not set](#rhcop-ocp_bestpract-00026-pod-anti-affinity-not-set) * [RHCOP-OCP_BESTPRACT-00027: DeploymentConfig triggers container name miss match](#rhcop-ocp_bestpract-00027-deploymentconfig-triggers-container-name-miss-match) -* [RHCOP-OCP_DEPRECATED-3.11-00001: BuildConfig no longer served by v1](#rhcop-ocp_deprecated-3.11-00001-buildconfig-no-longer-served-by-v1) -* [RHCOP-OCP_DEPRECATED-3.11-00002: DeploymentConfig no longer served by v1](#rhcop-ocp_deprecated-3.11-00002-deploymentconfig-no-longer-served-by-v1) -* [RHCOP-OCP_DEPRECATED-3.11-00003: ImageStream no longer served by v1](#rhcop-ocp_deprecated-3.11-00003-imagestream-no-longer-served-by-v1) -* [RHCOP-OCP_DEPRECATED-3.11-00004: ProjectRequest no longer served by v1](#rhcop-ocp_deprecated-3.11-00004-projectrequest-no-longer-served-by-v1) -* [RHCOP-OCP_DEPRECATED-3.11-00005: RoleBinding no longer served by v1](#rhcop-ocp_deprecated-3.11-00005-rolebinding-no-longer-served-by-v1) -* [RHCOP-OCP_DEPRECATED-3.11-00006: Route no longer served by v1](#rhcop-ocp_deprecated-3.11-00006-route-no-longer-served-by-v1) -* [RHCOP-OCP_DEPRECATED-3.11-00007: SecurityContextConstraints no longer served by v1](#rhcop-ocp_deprecated-3.11-00007-securitycontextconstraints-no-longer-served-by-v1) -* [RHCOP-OCP_DEPRECATED-3.11-00008: Template no longer served by v1](#rhcop-ocp_deprecated-3.11-00008-template-no-longer-served-by-v1) -* [RHCOP-OCP_DEPRECATED-4.1-00001: BuildConfig exposeDockerSocket deprecated](#rhcop-ocp_deprecated-4.1-00001-buildconfig-exposedockersocket-deprecated) -* [RHCOP-OCP_DEPRECATED-4.2-00001: authorization openshift io is deprecated](#rhcop-ocp_deprecated-4.2-00001-authorization-openshift-io-is-deprecated) -* [RHCOP-OCP_DEPRECATED-4.2-00002: automationbroker io v1alpha1 is deprecated](#rhcop-ocp_deprecated-4.2-00002-automationbroker-io-v1alpha1-is-deprecated) -* [RHCOP-OCP_DEPRECATED-4.2-00003: operators coreos com v1 CatalogSourceConfigs is deprecated](#rhcop-ocp_deprecated-4.2-00003-operators-coreos-com-v1-catalogsourceconfigs-is-deprecated) -* [RHCOP-OCP_DEPRECATED-4.2-00004: operators coreos com v2 CatalogSourceConfigs is deprecated](#rhcop-ocp_deprecated-4.2-00004-operators-coreos-com-v2-catalogsourceconfigs-is-deprecated) -* [RHCOP-OCP_DEPRECATED-4.2-00005: operators coreos com v1 OperatorSource is deprecated](#rhcop-ocp_deprecated-4.2-00005-operators-coreos-com-v1-operatorsource-is-deprecated) -* [RHCOP-OCP_DEPRECATED-4.2-00006: osb openshift io v1 is deprecated](#rhcop-ocp_deprecated-4.2-00006-osb-openshift-io-v1-is-deprecated) -* [RHCOP-OCP_DEPRECATED-4.2-00007: servicecatalog k8s io v1beta1 is deprecated](#rhcop-ocp_deprecated-4.2-00007-servicecatalog-k8s-io-v1beta1-is-deprecated) -* [RHCOP-OCP_DEPRECATED-4.3-00001: BuildConfig jenkinsPipelineStrategy is deprecated](#rhcop-ocp_deprecated-4.3-00001-buildconfig-jenkinspipelinestrategy-is-deprecated) +* [RHCOP-OCP_DEPRECATED-3_11-00001: BuildConfig no longer served by v1](#rhcop-ocp_deprecated-3_11-00001-buildconfig-no-longer-served-by-v1) +* [RHCOP-OCP_DEPRECATED-3_11-00002: DeploymentConfig no longer served by v1](#rhcop-ocp_deprecated-3_11-00002-deploymentconfig-no-longer-served-by-v1) +* [RHCOP-OCP_DEPRECATED-3_11-00003: ImageStream no longer served by v1](#rhcop-ocp_deprecated-3_11-00003-imagestream-no-longer-served-by-v1) +* [RHCOP-OCP_DEPRECATED-3_11-00004: ProjectRequest no longer served by v1](#rhcop-ocp_deprecated-3_11-00004-projectrequest-no-longer-served-by-v1) +* [RHCOP-OCP_DEPRECATED-3_11-00005: RoleBinding no longer served by v1](#rhcop-ocp_deprecated-3_11-00005-rolebinding-no-longer-served-by-v1) +* [RHCOP-OCP_DEPRECATED-3_11-00006: Route no longer served by v1](#rhcop-ocp_deprecated-3_11-00006-route-no-longer-served-by-v1) +* [RHCOP-OCP_DEPRECATED-3_11-00007: SecurityContextConstraints no longer served by v1](#rhcop-ocp_deprecated-3_11-00007-securitycontextconstraints-no-longer-served-by-v1) +* [RHCOP-OCP_DEPRECATED-3_11-00008: Template no longer served by v1](#rhcop-ocp_deprecated-3_11-00008-template-no-longer-served-by-v1) +* [RHCOP-OCP_DEPRECATED-4_1-00001: BuildConfig exposeDockerSocket deprecated](#rhcop-ocp_deprecated-4_1-00001-buildconfig-exposedockersocket-deprecated) +* [RHCOP-OCP_DEPRECATED-4_2-00001: authorization openshift io is deprecated](#rhcop-ocp_deprecated-4_2-00001-authorization-openshift-io-is-deprecated) +* [RHCOP-OCP_DEPRECATED-4_2-00002: automationbroker io v1alpha1 is deprecated](#rhcop-ocp_deprecated-4_2-00002-automationbroker-io-v1alpha1-is-deprecated) +* [RHCOP-OCP_DEPRECATED-4_2-00003: operators coreos com v1 CatalogSourceConfigs is deprecated](#rhcop-ocp_deprecated-4_2-00003-operators-coreos-com-v1-catalogsourceconfigs-is-deprecated) +* [RHCOP-OCP_DEPRECATED-4_2-00004: operators coreos com v2 CatalogSourceConfigs is deprecated](#rhcop-ocp_deprecated-4_2-00004-operators-coreos-com-v2-catalogsourceconfigs-is-deprecated) +* [RHCOP-OCP_DEPRECATED-4_2-00005: operators coreos com v1 OperatorSource is deprecated](#rhcop-ocp_deprecated-4_2-00005-operators-coreos-com-v1-operatorsource-is-deprecated) +* [RHCOP-OCP_DEPRECATED-4_2-00006: osb openshift io v1 is deprecated](#rhcop-ocp_deprecated-4_2-00006-osb-openshift-io-v1-is-deprecated) +* [RHCOP-OCP_DEPRECATED-4_2-00007: servicecatalog k8s io v1beta1 is deprecated](#rhcop-ocp_deprecated-4_2-00007-servicecatalog-k8s-io-v1beta1-is-deprecated) +* [RHCOP-OCP_DEPRECATED-4_3-00001: BuildConfig jenkinsPipelineStrategy is deprecated](#rhcop-ocp_deprecated-4_3-00001-buildconfig-jenkinspipelinestrategy-is-deprecated) * [RHCOP-OCP_REQ_INV-00001: Deployment has a matching PodDisruptionBudget](#rhcop-ocp_req_inv-00001-deployment-has-a-matching-poddisruptionbudget) * [RHCOP-OCP_REQ_INV-00002: Deployment has matching PersistentVolumeClaim](#rhcop-ocp_req_inv-00002-deployment-has-matching-persistentvolumeclaim) * [RHCOP-OCP_REQ_INV-00003: Deployment has a matching Service](#rhcop-ocp_req_inv-00003-deployment-has-a-matching-service) * [RHCOP-OCP_REQ_INV-00004: Deployment has matching ServiceAccount](#rhcop-ocp_req_inv-00004-deployment-has-matching-serviceaccount) * [RHCOP-OCP_REQ_INV-00005: Service has matching ServiceMonitor](#rhcop-ocp_req_inv-00005-service-has-matching-servicemonitor) -* [RHCOP-PODMAN-00001: Image contains expected SHA in history.](#rhcop-podman-00001-image-contains-expected-sha-in-history.) +* [RHCOP-PODMAN-00001: Image contains expected SHA in history](#rhcop-podman-00001-image-contains-expected-sha-in-history) * [RHCOP-PODMAN-00002: Image size is not greater than an expected value](#rhcop-podman-00002-image-size-is-not-greater-than-an-expected-value) ## RHCOP-COMBINE-00001: Namespace has a NetworkPolicy @@ -1054,7 +1054,7 @@ containers_contains_trigger(containers, triggerContainerName) { _source: [policy/ocp/bestpractices/deploymentconfig-triggers-containername](policy/ocp/bestpractices/deploymentconfig-triggers-containername)_ -## RHCOP-OCP_DEPRECATED-3.11-00001: BuildConfig no longer served by v1 +## RHCOP-OCP_DEPRECATED-3_11-00001: BuildConfig no longer served by v1 **Severity:** Violation @@ -1079,7 +1079,7 @@ violation[msg] { _source: [policy/ocp/deprecated/3_11/buildconfig-v1](policy/ocp/deprecated/3_11/buildconfig-v1)_ -## RHCOP-OCP_DEPRECATED-3.11-00002: DeploymentConfig no longer served by v1 +## RHCOP-OCP_DEPRECATED-3_11-00002: DeploymentConfig no longer served by v1 **Severity:** Violation @@ -1104,7 +1104,7 @@ violation[msg] { _source: [policy/ocp/deprecated/3_11/deploymentconfig-v1](policy/ocp/deprecated/3_11/deploymentconfig-v1)_ -## RHCOP-OCP_DEPRECATED-3.11-00003: ImageStream no longer served by v1 +## RHCOP-OCP_DEPRECATED-3_11-00003: ImageStream no longer served by v1 **Severity:** Violation @@ -1129,7 +1129,7 @@ violation[msg] { _source: [policy/ocp/deprecated/3_11/imagestream-v1](policy/ocp/deprecated/3_11/imagestream-v1)_ -## RHCOP-OCP_DEPRECATED-3.11-00004: ProjectRequest no longer served by v1 +## RHCOP-OCP_DEPRECATED-3_11-00004: ProjectRequest no longer served by v1 **Severity:** Violation @@ -1154,7 +1154,7 @@ violation[msg] { _source: [policy/ocp/deprecated/3_11/projectrequest-v1](policy/ocp/deprecated/3_11/projectrequest-v1)_ -## RHCOP-OCP_DEPRECATED-3.11-00005: RoleBinding no longer served by v1 +## RHCOP-OCP_DEPRECATED-3_11-00005: RoleBinding no longer served by v1 **Severity:** Violation @@ -1179,7 +1179,7 @@ violation[msg] { _source: [policy/ocp/deprecated/3_11/rolebinding-v1](policy/ocp/deprecated/3_11/rolebinding-v1)_ -## RHCOP-OCP_DEPRECATED-3.11-00006: Route no longer served by v1 +## RHCOP-OCP_DEPRECATED-3_11-00006: Route no longer served by v1 **Severity:** Violation @@ -1204,7 +1204,7 @@ violation[msg] { _source: [policy/ocp/deprecated/3_11/route-v1](policy/ocp/deprecated/3_11/route-v1)_ -## RHCOP-OCP_DEPRECATED-3.11-00007: SecurityContextConstraints no longer served by v1 +## RHCOP-OCP_DEPRECATED-3_11-00007: SecurityContextConstraints no longer served by v1 **Severity:** Violation @@ -1229,7 +1229,7 @@ violation[msg] { _source: [policy/ocp/deprecated/3_11/securitycontextconstraints-v1](policy/ocp/deprecated/3_11/securitycontextconstraints-v1)_ -## RHCOP-OCP_DEPRECATED-3.11-00008: Template no longer served by v1 +## RHCOP-OCP_DEPRECATED-3_11-00008: Template no longer served by v1 **Severity:** Violation @@ -1254,7 +1254,7 @@ violation[msg] { _source: [policy/ocp/deprecated/3_11/template-v1](policy/ocp/deprecated/3_11/template-v1)_ -## RHCOP-OCP_DEPRECATED-4.1-00001: BuildConfig exposeDockerSocket deprecated +## RHCOP-OCP_DEPRECATED-4_1-00001: BuildConfig exposeDockerSocket deprecated **Severity:** Violation @@ -1282,7 +1282,7 @@ violation[msg] { _source: [policy/ocp/deprecated/4_1/buildconfig-custom-strategy](policy/ocp/deprecated/4_1/buildconfig-custom-strategy)_ -## RHCOP-OCP_DEPRECATED-4.2-00001: authorization openshift io is deprecated +## RHCOP-OCP_DEPRECATED-4_2-00001: authorization openshift io is deprecated **Severity:** Violation @@ -1307,7 +1307,7 @@ violation[msg] { _source: [policy/ocp/deprecated/4_2/authorization-openshift](policy/ocp/deprecated/4_2/authorization-openshift)_ -## RHCOP-OCP_DEPRECATED-4.2-00002: automationbroker io v1alpha1 is deprecated +## RHCOP-OCP_DEPRECATED-4_2-00002: automationbroker io v1alpha1 is deprecated **Severity:** Violation @@ -1333,7 +1333,7 @@ violation[msg] { _source: [policy/ocp/deprecated/4_2/automationbroker-v1alpha1](policy/ocp/deprecated/4_2/automationbroker-v1alpha1)_ -## RHCOP-OCP_DEPRECATED-4.2-00003: operators coreos com v1 CatalogSourceConfigs is deprecated +## RHCOP-OCP_DEPRECATED-4_2-00003: operators coreos com v1 CatalogSourceConfigs is deprecated **Severity:** Violation @@ -1360,7 +1360,7 @@ violation[msg] { _source: [policy/ocp/deprecated/4_2/catalogsourceconfigs-v1](policy/ocp/deprecated/4_2/catalogsourceconfigs-v1)_ -## RHCOP-OCP_DEPRECATED-4.2-00004: operators coreos com v2 CatalogSourceConfigs is deprecated +## RHCOP-OCP_DEPRECATED-4_2-00004: operators coreos com v2 CatalogSourceConfigs is deprecated **Severity:** Violation @@ -1387,7 +1387,7 @@ violation[msg] { _source: [policy/ocp/deprecated/4_2/catalogsourceconfigs-v2](policy/ocp/deprecated/4_2/catalogsourceconfigs-v2)_ -## RHCOP-OCP_DEPRECATED-4.2-00005: operators coreos com v1 OperatorSource is deprecated +## RHCOP-OCP_DEPRECATED-4_2-00005: operators coreos com v1 OperatorSource is deprecated **Severity:** Violation @@ -1413,7 +1413,7 @@ violation[msg] { _source: [policy/ocp/deprecated/4_2/operatorsources-v1](policy/ocp/deprecated/4_2/operatorsources-v1)_ -## RHCOP-OCP_DEPRECATED-4.2-00006: osb openshift io v1 is deprecated +## RHCOP-OCP_DEPRECATED-4_2-00006: osb openshift io v1 is deprecated **Severity:** Violation @@ -1439,7 +1439,7 @@ violation[msg] { _source: [policy/ocp/deprecated/4_2/osb-v1](policy/ocp/deprecated/4_2/osb-v1)_ -## RHCOP-OCP_DEPRECATED-4.2-00007: servicecatalog k8s io v1beta1 is deprecated +## RHCOP-OCP_DEPRECATED-4_2-00007: servicecatalog k8s io v1beta1 is deprecated **Severity:** Violation @@ -1465,7 +1465,7 @@ violation[msg] { _source: [policy/ocp/deprecated/4_2/servicecatalog-v1beta1](policy/ocp/deprecated/4_2/servicecatalog-v1beta1)_ -## RHCOP-OCP_DEPRECATED-4.3-00001: BuildConfig jenkinsPipelineStrategy is deprecated +## RHCOP-OCP_DEPRECATED-4_3-00001: BuildConfig jenkinsPipelineStrategy is deprecated **Severity:** Violation @@ -1691,7 +1691,7 @@ service_has_matching_servicemonitor(service, manifests) { _source: [policy/ocp/requiresinventory/service-has-matching-servicemonitor](policy/ocp/requiresinventory/service-has-matching-servicemonitor)_ -## RHCOP-PODMAN-00001: Image contains expected SHA in history. +## RHCOP-PODMAN-00001: Image contains expected SHA in history **Severity:** Violation diff --git a/policy/ocp/deprecated/3_11/buildconfig-v1/src.rego b/policy/ocp/deprecated/3_11/buildconfig-v1/src.rego index 6675b80b..f15061f5 100644 --- a/policy/ocp/deprecated/3_11/buildconfig-v1/src.rego +++ b/policy/ocp/deprecated/3_11/buildconfig-v1/src.rego @@ -1,4 +1,4 @@ -# @title RHCOP-OCP_DEPRECATED-3.11-00001: BuildConfig no longer served by v1 +# @title RHCOP-OCP_DEPRECATED-3_11-00001: BuildConfig no longer served by v1 # # OCP4.x expects build.openshift.io/v1. # diff --git a/policy/ocp/deprecated/3_11/deploymentconfig-v1/src.rego b/policy/ocp/deprecated/3_11/deploymentconfig-v1/src.rego index 612766d6..95b6015e 100644 --- a/policy/ocp/deprecated/3_11/deploymentconfig-v1/src.rego +++ b/policy/ocp/deprecated/3_11/deploymentconfig-v1/src.rego @@ -1,4 +1,4 @@ -# @title RHCOP-OCP_DEPRECATED-3.11-00002: DeploymentConfig no longer served by v1 +# @title RHCOP-OCP_DEPRECATED-3_11-00002: DeploymentConfig no longer served by v1 # # OCP4.x expects apps.openshift.io/v1. # diff --git a/policy/ocp/deprecated/3_11/imagestream-v1/src.rego b/policy/ocp/deprecated/3_11/imagestream-v1/src.rego index 81d8ebe9..8e930608 100644 --- a/policy/ocp/deprecated/3_11/imagestream-v1/src.rego +++ b/policy/ocp/deprecated/3_11/imagestream-v1/src.rego @@ -1,4 +1,4 @@ -# @title RHCOP-OCP_DEPRECATED-3.11-00003: ImageStream no longer served by v1 +# @title RHCOP-OCP_DEPRECATED-3_11-00003: ImageStream no longer served by v1 # # OCP4.x expects image.openshift.io/v1. # diff --git a/policy/ocp/deprecated/3_11/projectrequest-v1/src.rego b/policy/ocp/deprecated/3_11/projectrequest-v1/src.rego index 938c5a00..0faf847a 100644 --- a/policy/ocp/deprecated/3_11/projectrequest-v1/src.rego +++ b/policy/ocp/deprecated/3_11/projectrequest-v1/src.rego @@ -1,4 +1,4 @@ -# @title RHCOP-OCP_DEPRECATED-3.11-00004: ProjectRequest no longer served by v1 +# @title RHCOP-OCP_DEPRECATED-3_11-00004: ProjectRequest no longer served by v1 # # OCP4.x expects project.openshift.io/v1. # diff --git a/policy/ocp/deprecated/3_11/rolebinding-v1/src.rego b/policy/ocp/deprecated/3_11/rolebinding-v1/src.rego index 7d1b2fd3..833e5457 100644 --- a/policy/ocp/deprecated/3_11/rolebinding-v1/src.rego +++ b/policy/ocp/deprecated/3_11/rolebinding-v1/src.rego @@ -1,4 +1,4 @@ -# @title RHCOP-OCP_DEPRECATED-3.11-00005: RoleBinding no longer served by v1 +# @title RHCOP-OCP_DEPRECATED-3_11-00005: RoleBinding no longer served by v1 # # OCP4.x expects rbac.authorization.k8s.io/v1 # diff --git a/policy/ocp/deprecated/3_11/route-v1/src.rego b/policy/ocp/deprecated/3_11/route-v1/src.rego index 70ecccc3..efc4f09e 100644 --- a/policy/ocp/deprecated/3_11/route-v1/src.rego +++ b/policy/ocp/deprecated/3_11/route-v1/src.rego @@ -1,4 +1,4 @@ -# @title RHCOP-OCP_DEPRECATED-3.11-00006: Route no longer served by v1 +# @title RHCOP-OCP_DEPRECATED-3_11-00006: Route no longer served by v1 # # OCP4.x expects route.openshift.io/v1. # diff --git a/policy/ocp/deprecated/3_11/securitycontextconstraints-v1/src.rego b/policy/ocp/deprecated/3_11/securitycontextconstraints-v1/src.rego index eceb649c..6a5827b3 100644 --- a/policy/ocp/deprecated/3_11/securitycontextconstraints-v1/src.rego +++ b/policy/ocp/deprecated/3_11/securitycontextconstraints-v1/src.rego @@ -1,4 +1,4 @@ -# @title RHCOP-OCP_DEPRECATED-3.11-00007: SecurityContextConstraints no longer served by v1 +# @title RHCOP-OCP_DEPRECATED-3_11-00007: SecurityContextConstraints no longer served by v1 # # OCP4.x expects security.openshift.io/v1. # diff --git a/policy/ocp/deprecated/3_11/template-v1/src.rego b/policy/ocp/deprecated/3_11/template-v1/src.rego index 1f240256..7058c0d9 100644 --- a/policy/ocp/deprecated/3_11/template-v1/src.rego +++ b/policy/ocp/deprecated/3_11/template-v1/src.rego @@ -1,4 +1,4 @@ -# @title RHCOP-OCP_DEPRECATED-3.11-00008: Template no longer served by v1 +# @title RHCOP-OCP_DEPRECATED-3_11-00008: Template no longer served by v1 # # OCP4.x expects template.openshift.io/v1. # diff --git a/policy/ocp/deprecated/4_1/buildconfig-custom-strategy/src.rego b/policy/ocp/deprecated/4_1/buildconfig-custom-strategy/src.rego index b15c8ab2..6295198a 100644 --- a/policy/ocp/deprecated/4_1/buildconfig-custom-strategy/src.rego +++ b/policy/ocp/deprecated/4_1/buildconfig-custom-strategy/src.rego @@ -1,4 +1,4 @@ -# @title RHCOP-OCP_DEPRECATED-4.1-00001: BuildConfig exposeDockerSocket deprecated +# @title RHCOP-OCP_DEPRECATED-4_1-00001: BuildConfig exposeDockerSocket deprecated # # 'spec.strategy.customStrategy.exposeDockerSocket' is no longer supported by BuildConfig. # See: https://docs.openshift.com/container-platform/4.1/release_notes/ocp-4-1-release-notes.html#ocp-41-deprecated-features diff --git a/policy/ocp/deprecated/4_2/authorization-openshift/src.rego b/policy/ocp/deprecated/4_2/authorization-openshift/src.rego index de308e98..56694324 100644 --- a/policy/ocp/deprecated/4_2/authorization-openshift/src.rego +++ b/policy/ocp/deprecated/4_2/authorization-openshift/src.rego @@ -1,4 +1,4 @@ -# @title RHCOP-OCP_DEPRECATED-4.2-00001: authorization openshift io is deprecated +# @title RHCOP-OCP_DEPRECATED-4_2-00001: authorization openshift io is deprecated # # From OCP4.2 onwards, you should migrate from 'authorization.openshift.io' to rbac.authorization.k8s.io/v1. # See: https://docs.openshift.com/container-platform/4.2/release_notes/ocp-4-2-release-notes.html#ocp-4-2-deprecated-features diff --git a/policy/ocp/deprecated/4_2/automationbroker-v1alpha1/src.rego b/policy/ocp/deprecated/4_2/automationbroker-v1alpha1/src.rego index d70d6863..e3afa41f 100644 --- a/policy/ocp/deprecated/4_2/automationbroker-v1alpha1/src.rego +++ b/policy/ocp/deprecated/4_2/automationbroker-v1alpha1/src.rego @@ -1,4 +1,4 @@ -# @title RHCOP-OCP_DEPRECATED-4.2-00002: automationbroker io v1alpha1 is deprecated +# @title RHCOP-OCP_DEPRECATED-4_2-00002: automationbroker io v1alpha1 is deprecated # # 'automationbroker.io/v1alpha1' is deprecated in OCP 4.2 and removed in 4.4. # See: https://docs.openshift.com/container-platform/4.2/release_notes/ocp-4-2-release-notes.html#ocp-4-2-deprecated-features diff --git a/policy/ocp/deprecated/4_2/catalogsourceconfigs-v1/src.rego b/policy/ocp/deprecated/4_2/catalogsourceconfigs-v1/src.rego index a6ae60ad..c8d41591 100644 --- a/policy/ocp/deprecated/4_2/catalogsourceconfigs-v1/src.rego +++ b/policy/ocp/deprecated/4_2/catalogsourceconfigs-v1/src.rego @@ -1,4 +1,4 @@ -# @title RHCOP-OCP_DEPRECATED-4.2-00003: operators coreos com v1 CatalogSourceConfigs is deprecated +# @title RHCOP-OCP_DEPRECATED-4_2-00003: operators coreos com v1 CatalogSourceConfigs is deprecated # # 'operators.coreos.com/v1:CatalogSourceConfigs' is deprecated in OCP 4.2 and removed in 4.5. # See: https://docs.openshift.com/container-platform/4.2/release_notes/ocp-4-2-release-notes.html#ocp-4-2-deprecated-features diff --git a/policy/ocp/deprecated/4_2/catalogsourceconfigs-v2/src.rego b/policy/ocp/deprecated/4_2/catalogsourceconfigs-v2/src.rego index 8cacf266..328935f8 100644 --- a/policy/ocp/deprecated/4_2/catalogsourceconfigs-v2/src.rego +++ b/policy/ocp/deprecated/4_2/catalogsourceconfigs-v2/src.rego @@ -1,4 +1,4 @@ -# @title RHCOP-OCP_DEPRECATED-4.2-00004: operators coreos com v2 CatalogSourceConfigs is deprecated +# @title RHCOP-OCP_DEPRECATED-4_2-00004: operators coreos com v2 CatalogSourceConfigs is deprecated # # 'operators.coreos.com/v2:CatalogSourceConfigs' is deprecated in OCP 4.2 and removed in 4.5. # See: https://docs.openshift.com/container-platform/4.2/release_notes/ocp-4-2-release-notes.html#ocp-4-2-deprecated-features diff --git a/policy/ocp/deprecated/4_2/operatorsources-v1/src.rego b/policy/ocp/deprecated/4_2/operatorsources-v1/src.rego index 459248e9..423a1f25 100644 --- a/policy/ocp/deprecated/4_2/operatorsources-v1/src.rego +++ b/policy/ocp/deprecated/4_2/operatorsources-v1/src.rego @@ -1,4 +1,4 @@ -# @title RHCOP-OCP_DEPRECATED-4.2-00005: operators coreos com v1 OperatorSource is deprecated +# @title RHCOP-OCP_DEPRECATED-4_2-00005: operators coreos com v1 OperatorSource is deprecated # # 'operators.coreos.com/v1:OperatorSource' is deprecated in OCP 4.2 and will be removed in a future version. # See: https://docs.openshift.com/container-platform/4.2/release_notes/ocp-4-2-release-notes.html#ocp-4-2-deprecated-features diff --git a/policy/ocp/deprecated/4_2/osb-v1/src.rego b/policy/ocp/deprecated/4_2/osb-v1/src.rego index 3a83d3a5..e777cdb2 100644 --- a/policy/ocp/deprecated/4_2/osb-v1/src.rego +++ b/policy/ocp/deprecated/4_2/osb-v1/src.rego @@ -1,4 +1,4 @@ -# @title RHCOP-OCP_DEPRECATED-4.2-00006: osb openshift io v1 is deprecated +# @title RHCOP-OCP_DEPRECATED-4_2-00006: osb openshift io v1 is deprecated # # 'osb.openshift.io/v1' is deprecated in OCP 4.2 and removed in 4.5. # See: https://docs.openshift.com/container-platform/4.2/release_notes/ocp-4-2-release-notes.html#ocp-4-2-deprecated-features diff --git a/policy/ocp/deprecated/4_2/servicecatalog-v1beta1/src.rego b/policy/ocp/deprecated/4_2/servicecatalog-v1beta1/src.rego index bbc43fa7..9b42b239 100644 --- a/policy/ocp/deprecated/4_2/servicecatalog-v1beta1/src.rego +++ b/policy/ocp/deprecated/4_2/servicecatalog-v1beta1/src.rego @@ -1,4 +1,4 @@ -# @title RHCOP-OCP_DEPRECATED-4.2-00007: servicecatalog k8s io v1beta1 is deprecated +# @title RHCOP-OCP_DEPRECATED-4_2-00007: servicecatalog k8s io v1beta1 is deprecated # # 'servicecatalog.k8s.io/v1beta1' is deprecated in OCP 4.2 and removed in 4.5. # See: https://docs.openshift.com/container-platform/4.2/release_notes/ocp-4-2-release-notes.html#ocp-4-2-deprecated-features diff --git a/policy/ocp/deprecated/4_3/buildconfig-jenkinspipeline-strategy/src.rego b/policy/ocp/deprecated/4_3/buildconfig-jenkinspipeline-strategy/src.rego index 3e8976ab..3ae8b1e5 100644 --- a/policy/ocp/deprecated/4_3/buildconfig-jenkinspipeline-strategy/src.rego +++ b/policy/ocp/deprecated/4_3/buildconfig-jenkinspipeline-strategy/src.rego @@ -1,4 +1,4 @@ -# @title RHCOP-OCP_DEPRECATED-4.3-00001: BuildConfig jenkinsPipelineStrategy is deprecated +# @title RHCOP-OCP_DEPRECATED-4_3-00001: BuildConfig jenkinsPipelineStrategy is deprecated # # 'spec.strategy.jenkinsPipelineStrategy' is no longer supported by BuildConfig. # See: https://docs.openshift.com/container-platform/4.3/release_notes/ocp-4-3-release-notes.html#ocp-4-3-deprecated-features diff --git a/policy/podman/history/contains-layer/src.rego b/policy/podman/history/contains-layer/src.rego index deb0f024..becfaac9 100644 --- a/policy/podman/history/contains-layer/src.rego +++ b/policy/podman/history/contains-layer/src.rego @@ -1,4 +1,4 @@ -# @title RHCOP-PODMAN-00001: Image contains expected SHA in history. +# @title RHCOP-PODMAN-00001: Image contains expected SHA in history # # Most images are built from a subset of authorised base images in a company, # this policy allows enforcement of that policy by checking for an expected SHA.