cel expressions of hostprocess containers updated

[siddhikhapare]

Related Issue(s)

Partially Fixes #1058
Fixes #1095

Description

I have updated the disallow-host-process policy to include a CEL variable, allContainers, which combines all container types and ensures the hostProcess field is either not set or set to false for each container.

Checklist

• I have read the policy contribution guidelines.
• I have added test manifests and resources covering both positive and negative tests that prove this policy works as intended.
• I have added the artifacthub-pkg.yml file and have verified it is complete and correct.

[siddhikhapare]

@chipzoller Could you please review my PR? Thanks.

[chipzoller]

Waiting for CI to run. Seems like Actions are hung.

[siddhikhapare]

Waiting for CI to run. Seems like Actions are hung.

Okay.

[siddhikhapare]

@chipzoller HostProcess requirements specify configurations for Windows containers that need privileged access to the host, including settings such as hostProcess, hostNetwork, and specific user roles like runAsUserName and runAsNonRoot. If Pod Security Standards define security profiles within a policy, do we still need to explicitly mention the other requirements for HostProcess Pod configuration such as hostNetwork and user roles in policy? This point confuses me, and I would appreciate some clarification. I referred k8s doc

[chipzoller]

All this policy is concerned with is implementing the exact checks for the specified control. It should only be a CEL version of this policy.

[chipzoller]

Closing then re-opening to see if CI will get unstuck.