fix: add system authenticate bind protection policy

Signed-off-by: chenk <[email protected]>
aquasecurity · Jan 29, 2024 · ac7d6c1 · ac7d6c1
1 parent 9eea4f7
commit ac7d6c1
Show file tree

Hide file tree

Showing 3 changed files with 2 additions and 2 deletions.
diff --git a/.../kubernetes/general/AVD-KSV-01011/docs.md → ...docs/kubernetes/gke/AVD-KSV-01011/docs.md b/.../kubernetes/general/AVD-KSV-01011/docs.md → ...docs/kubernetes/gke/AVD-KSV-01011/docs.md
diff --git a/...etes/general/authenticate_group_bind.rego → ...bernetes/gke/authenticate_group_bind.rego b/...etes/general/authenticate_group_bind.rego → ...bernetes/gke/authenticate_group_bind.rego
diff --git a/...general/authenticate_group_bind_test.rego → ...tes/gke/authenticate_group_bind_test.rego b/...general/authenticate_group_bind_test.rego → ...tes/gke/authenticate_group_bind_test.rego
@@ -62,7 +62,7 @@ test_cluster_role_binding_with_system_authenticate_binding {
 	count(r) == 1
 }
 
-# Test case for a RoleBinding with system_authenticated group binding
+# Test case for a RoleBinding with non system_authenticated group binding
 test_role_binding_with_non_system_authenticated_binding {
 	r := deny with input as {
 		"apiVersion": "rbac.authorization.k8s.io/v1",
@@ -86,7 +86,7 @@ test_role_binding_with_non_system_authenticated_binding {
 	count(r) == 0
 }
 
-# Test case for a ClusterRoleBinding with non-anonymous user binding
+# Test case for a ClusterRoleBinding with non system_authenticated group binding
 test_cluster_role_binding_with_non_system_authenticated_group_binding {
 	r := deny with input as {
 		"apiVersion": "rbac.authorization.k8s.io/v1",