OPA

Findings · 10

1. 1 Data races between Gatekeeper controllers Undetermined
2. 2 Setting audit interval to a negative value leads to an infinite audit loop Low
3. 3 The constraintViolationsLimit can be set to a negative value Informational
4. 4 ConstraintTemplate Controller creation doesn't clear client cache Informational
5. 5 Default deployment uses insecure failurePolicy for validating webhook High
6. 6 Policy validation doesn’t stop on first violation and doesn’t time out, potentially allowing denial of service Informational
7. 7 The deployment configuration should explicitly drop Linux capabilities Informational
8. 8 The deployment configuration does not use seccomp policies Low
9. 9 OPA client and backend are shared across all parts of Gatekeeper Informational
10. 10 Unique namespace example uses ineficient data structures Informational

Findings extracted from the published report PDF. See the full report below for details and remediation.