http:
  https://nginx-ingress-controller:{{ .Vars.service.ports.https }}:
    status: 404
    allow-insecure: true
file:
  /var/run/secrets/kubernetes.io/serviceaccount:
    exists: {{ .Vars.serviceAccount.automountServiceAccountToken }}
    filetype: directory
    mode: "3777"
command:
  check-user-info:
    exec: id
    exit-status: 0
    stdout:
      - uid={{ .Vars.containerSecurityContext.runAsUser }}
      - /groups=.*{{ .Vars.podSecurityContext.fsGroup }}/
  check-capabilities:
    exec: capsh --print
    exit-status: 0
    stdout:
      - Bounding set ={{ .Vars.containerSecurityContext.capabilities.add }}
