file:
  /var/run/secrets/kubernetes.io/serviceaccount:
    exists: {{ .Vars.operator.serviceAccount.automountServiceAccountToken }}
    filetype: directory
    mode: "3777"
command:
  check-no-capabilities:
    exec: cat /proc/1/status
    exit-status: 0
    stdout:
    - "CapInh:	0000000000000000"
    - "CapPrm:	0000000000000000"
    - "CapEff:	0000000000000000"
    - "CapBnd:	0000000000000000"
    - "CapAmb:	0000000000000000"
  check-user-info:
    exec: id
    exit-status: 0
    stdout:
    - uid={{ .Vars.operator.podSecurityContext.runAsUser }}
    - /groups=.*{{ .Vars.operator.podSecurityContext.fsGroup }}/
