Skip to content

Commit

Permalink
updating documentation for k8s admission control
Browse files Browse the repository at this point in the history
  • Loading branch information
Yusuf Kanchwala committed Apr 20, 2021
1 parent 4a20105 commit 63bd43f
Showing 1 changed file with 3 additions and 3 deletions.
6 changes: 3 additions & 3 deletions docs/integrations/admission-controller-webhooks-usage.md
Original file line number Diff line number Diff line change
Expand Up @@ -35,7 +35,7 @@ Run Terrascan docker image in your server using the following command:
`<DATA_PATH>` is a directory path in your server where both the certificate and the private key .pem files are stored.
In addition, this directory is used to save the webhook logs. (An SQLite file)

You can specify a config file that specifies which policies to use in the scan and which violations should lead to rejection. Policies below the [severity] level will be ignored. Policies below the [k8s-deny-rules] denied-severity will be logged and displayed by terrascan, but will not lead to a rejected admission response to the k8s API server.
You can specify a config file that specifies which policies to use in the scan and which violations should lead to rejection. Policies below the [severity] level will be ignored. Policies below the [k8s-admission-control] denied-severity will be logged and displayed by terrascan, but will not lead to a rejected admission response to the k8s API server.

A config file example: ```config.toml```

Expand All @@ -47,7 +47,7 @@ A config file example: ```config.toml```
"accurics.kubernetes.IAM.107"
]
[k8s-deny-rules]
[k8s-admission-control]
denied-categories = [
"Network Ports Security"
]
Expand All @@ -61,7 +61,7 @@ You can specify the following configurations:
* **category** - the list of type of categories of the policies to be scanned


* **k8s-deny-rules** - specify the rules that should cause a rejection of the admission request
* **k8s-admission-control** - specify the rules that should cause a rejection of the admission request
* **denied-categories** - one or more policy categories that are not allowed in the detected violations
* **denied-severity** - the minimal level of severity that should cause a rejection

Expand Down

0 comments on commit 63bd43f

Please sign in to comment.