Labels:

• alertname = deployment_validation_operator_drop_net_raw_capability
• app = mas-sso
• check_description = Indicates when containers do not drop NET_RAW capability
• check_remediation = NET_RAW makes it so that an application within the container is able to craft raw packets, use raw sockets, and bind to any address. Remove this capability in the containers under containers security contexts.
• cluster = app-sre-prod-04
• endpoint = http-metrics
• environment = production
• exported_namespace = mas-sso-production
• instance = 10.129.8.25:8383
• jiralert = MGDSTRM
• job = deployment-validation-operator-metrics
• kind = Pod
• name = mas-sso-operator-catalog-k9z6f
• namespace = deployment-validation-operator
• pod = deployment-validation-operator-5dfc4b8c7d-9ch8k
• prometheus = openshift-customer-monitoring/app-sre
• service = deployment-validation-operator
• severity = medium

Annotations:

• dashboard = https://grafana.app-sre.devshift.net/d/dashdotdb/dash-db?orgId=1&var-datasource=dashdotdb-rds&var-cluster=app-sre-prod-04&var-namespace=mas-sso-production
• html_url = https://gitlab.cee.redhat.com/service/app-interface/blob/master/resources/services/deployment-validation-operator/prometheusrules.yaml.j2
• message = deployment_validation_operator_drop_net_raw_capability Validation error for mas-sso: Indicates when containers do not drop NET_RAW capability
• runbook = NET_RAW makes it so that an application within the container is able to craft raw packets, use raw sockets, and bind to any address. Remove this capability in the containers under containers security contexts.

Source: https://prometheus.app-sre-prod-04.devshift.net/graph?g0.expr=deployment_validation_operator_drop_net_raw_capability%7Bexported_namespace%3D%22mas-sso-production%22%7D+%3E+0&g0.tab=1