Rule Changes (#2337)

K8s Rule Changes
2022-10-04 16:56:45 -04:00
parent 05b715f116
commit 701c8a0e22
11 changed files with 107 additions and 50 deletions
@@ -88,6 +88,7 @@
    "kubernetes.audit.objectRef.namespace": "keyword",
    "kubernetes.audit.objectRef.serviceAccountName": "keyword",
    "kubernetes.audit.requestObject.spec.serviceAccountName": "keyword",
-    "kubernetes.audit.responseStatus.reason": "keyword"
+    "kubernetes.audit.responseStatus.reason": "keyword",
+    "kubernetes.audit.requestObject.spec.containers.image": "text"
  }
 }