kube-bench/cfg/config.yaml

---
## Controls Files. 
# These are YAML files that hold all the details for running checks.
#
## Uncomment to use different control file paths.
# masterControls: ./cfg/master.yaml
# nodeControls: ./cfg/node.yaml
# federatedControls: ./cfg/federated.yaml

master:
  components:
    - apiserver
    - scheduler
    - controllermanager
    - etcd 
    - flanneld
    # kubernetes is a component to cover the config file /etc/kubernetes/config that is referred to in the benchmark
    - kubernetes

  kubernetes:
    defaultconf: /etc/kubernetes/config

  apiserver:
    bins:
      - "kube-apiserver"
      - "hyperkube apiserver"
      - "apiserver"
    confs:
      - /etc/kubernetes/apiserver.conf
      - /etc/kubernetes/apiserver
    defaultconf: /etc/kubernetes/apiserver

    podspecs:
      - /etc/kubernetes/manifests/kube-apiserver.yaml
    defaultpodspec: /etc/kubernetes/manifests/kube-apiserver.yaml

  scheduler:
    bins:
      - "kube-scheduler"
      - "hyperkube scheduler"
      - "scheduler"
    confs: 
      - /etc/kubernetes/scheduler.conf
      - /etc/kubernetes/scheduler
    defaultconf: /etc/kubernetes/scheduler

    podspecs:
      - /etc/kubernetes/manifests/kube-scheduler.yaml
    defaultpodspec: /etc/kubernetes/manifests/kube-scheduler.yaml

  controllermanager:
    bins:
      - "kube-controller-manager"
      - "hyperkube controller-manager"
      - "controller-manager"
    confs:
      - /etc/kubernetes/controller-manager.conf
      - /etc/kubernetes/controller-manager
    defaultconf: /etc/kubernetes/controller-manager

    podspecs:
      - /etc/kubernetes/manifests/kube-controller-manager.yaml
    defaultpodspec: /etc/kubernetes/manifests/kube-controller-manager.yaml

  etcd:
    optional: true
    bins:
      - "etcd"
    confs:
      - /etc/etcd/etcd.conf
    defaultconf: /etc/etcd/etcd.conf

    podspecs:
      - /etc/kubernetes/manifests/etcd.yaml
    defaultpodspec: /etc/kubernetes/manifests/etcd.yaml

  flanneld:
    optional: true
    bins:
      - flanneld
    defaultconf: /etc/sysconfig/flanneld


node:
  components:
    - kubelet
    - proxy
    # kubernetes is a component to cover the config file /etc/kubernetes/config that is referred to in the benchmark
    - kubernetes

  kubernetes:
    defaultconf: /etc/kubernetes/config    

  kubelet:
    bins:
      - "hyperkube kubelet"
      - "kubelet"
    confs:
      - /etc/kubernetes/kubelet.conf
      - /etc/kubernetes/kubelet 
    defaultconf: "/etc/kubernetes/kubelet.conf"

    unitfiles:
     - /etc/systemd/system/kubelet.service.d/10-kubeadm.conf
    defaultunitfile: /etc/systemd/system/kubelet.service.d/10-kubeadm.conf
  
  proxy:
    bins:
      - "kube-proxy"
      - "hyperkube proxy"
      - "proxy"
    confs:
      - /etc/kubernetes/proxy.conf
      - /etc/kubernetes/proxy
      - /etc/kubernetes/addons/kube-proxy-daemonset.yaml

federated:
  components:
    - fedapiserver
    - fedcontrollermanager

  fedapiserver:
    bins:
      - "hyperkube federation-apiserver"
      - "kube-federation-apiserver"
      - "federation-apiserver"

  fedcontrollermanager:
    bins:
      - "hyperkube federation-controller-manager"
      - "kube-federation-controller-manager"
      - "federation-controller-manager"
Initial commit 2017-05-26 09:25:29 +00:00			`---`
			`## Controls Files.`
			`# These are YAML files that hold all the details for running checks.`
			`#`
			`## Uncomment to use different control file paths.`
No need to run install.sh. Simply clone the project, compile the go app and run ./cis_kubernetes 2017-06-19 21:03:46 +00:00			`# masterControls: ./cfg/master.yaml`
			`# nodeControls: ./cfg/node.yaml`
			`# federatedControls: ./cfg/federated.yaml`
Initial commit 2017-05-26 09:25:29 +00:00
Update the config file 2017-08-30 17:36:00 +00:00			`master:`
Reorder YAML to make a bit more sense. Allow for optional components, and a config file that we don’t think exists. 2017-08-31 13:45:16 +00:00			`components:`
			`- apiserver`
			`- scheduler`
			`- controllermanager`
			`- etcd`
			`- flanneld`
Corrections to config file substitutions. Use “kubernetes” as a fake component name so we can more easily substitute “kubernetesconf” 2017-08-31 16:39:40 +00:00			`# kubernetes is a component to cover the config file /etc/kubernetes/config that is referred to in the benchmark`
Reorder YAML to make a bit more sense. Allow for optional components, and a config file that we don’t think exists. 2017-08-31 13:45:16 +00:00			`- kubernetes`

			`kubernetes:`
			`defaultconf: /etc/kubernetes/config`

			`apiserver:`
			`bins:`
Update the config file 2017-08-30 17:36:00 +00:00			`- "kube-apiserver"`
			`- "hyperkube apiserver"`
			`- "apiserver"`
Reorder YAML to make a bit more sense. Allow for optional components, and a config file that we don’t think exists. 2017-08-31 13:45:16 +00:00			`confs:`
			`- /etc/kubernetes/apiserver.conf`
			`- /etc/kubernetes/apiserver`
			`defaultconf: /etc/kubernetes/apiserver`

Add function to get pod specs for kubernetes components. 2017-10-15 11:43:35 +00:00			`podspecs:`
			`- /etc/kubernetes/manifests/kube-apiserver.yaml`
			`defaultpodspec: /etc/kubernetes/manifests/kube-apiserver.yaml`

Reorder YAML to make a bit more sense. Allow for optional components, and a config file that we don’t think exists. 2017-08-31 13:45:16 +00:00			`scheduler:`
			`bins:`
Update the config file 2017-08-30 17:36:00 +00:00			`- "kube-scheduler"`
			`- "hyperkube scheduler"`
			`- "scheduler"`
Reorder YAML to make a bit more sense. Allow for optional components, and a config file that we don’t think exists. 2017-08-31 13:45:16 +00:00			`confs:`
			`- /etc/kubernetes/scheduler.conf`
			`- /etc/kubernetes/scheduler`
			`defaultconf: /etc/kubernetes/scheduler`

Add function to get pod specs for kubernetes components. 2017-10-15 11:43:35 +00:00			`podspecs:`
			`- /etc/kubernetes/manifests/kube-scheduler.yaml`
			`defaultpodspec: /etc/kubernetes/manifests/kube-scheduler.yaml`

Reorder YAML to make a bit more sense. Allow for optional components, and a config file that we don’t think exists. 2017-08-31 13:45:16 +00:00			`controllermanager:`
			`bins:`
Update the config file 2017-08-30 17:36:00 +00:00			`- "kube-controller-manager"`
			`- "hyperkube controller-manager"`
			`- "controller-manager"`
Reorder YAML to make a bit more sense. Allow for optional components, and a config file that we don’t think exists. 2017-08-31 13:45:16 +00:00			`confs:`
Update the config file 2017-08-30 17:36:00 +00:00			`- /etc/kubernetes/controller-manager.conf`
			`- /etc/kubernetes/controller-manager`
Reorder YAML to make a bit more sense. Allow for optional components, and a config file that we don’t think exists. 2017-08-31 13:45:16 +00:00			`defaultconf: /etc/kubernetes/controller-manager`

Add function to get pod specs for kubernetes components. 2017-10-15 11:43:35 +00:00			`podspecs:`
			`- /etc/kubernetes/manifests/kube-controller-manager.yaml`
			`defaultpodspec: /etc/kubernetes/manifests/kube-controller-manager.yaml`

Reorder YAML to make a bit more sense. Allow for optional components, and a config file that we don’t think exists. 2017-08-31 13:45:16 +00:00			`etcd:`
			`optional: true`
			`bins:`
			`- "etcd"`
			`confs:`
Update the config file 2017-08-30 17:36:00 +00:00			`- /etc/etcd/etcd.conf`
Reorder YAML to make a bit more sense. Allow for optional components, and a config file that we don’t think exists. 2017-08-31 13:45:16 +00:00			`defaultconf: /etc/etcd/etcd.conf`

Add function to get pod specs for kubernetes components. 2017-10-15 11:43:35 +00:00			`podspecs:`
			`- /etc/kubernetes/manifests/etcd.yaml`
			`defaultpodspec: /etc/kubernetes/manifests/etcd.yaml`

Reorder YAML to make a bit more sense. Allow for optional components, and a config file that we don’t think exists. 2017-08-31 13:45:16 +00:00			`flanneld:`
			`optional: true`
			`bins:`
			`- flanneld`
			`defaultconf: /etc/sysconfig/flanneld`

Move kubernetes binaries and config paths to kube-bench config. 2017-07-13 00:24:09 +00:00
Update the config file 2017-08-30 17:36:00 +00:00			`node:`
Reorder YAML to make a bit more sense. Allow for optional components, and a config file that we don’t think exists. 2017-08-31 13:45:16 +00:00			`components:`
			`- kubelet`
			`- proxy`
Corrections to config file substitutions. Use “kubernetes” as a fake component name so we can more easily substitute “kubernetesconf” 2017-08-31 16:39:40 +00:00			`# kubernetes is a component to cover the config file /etc/kubernetes/config that is referred to in the benchmark`
			`- kubernetes`

			`kubernetes:`
			`defaultconf: /etc/kubernetes/config`
Reorder YAML to make a bit more sense. Allow for optional components, and a config file that we don’t think exists. 2017-08-31 13:45:16 +00:00
			`kubelet:`
			`bins:`
Update the config file 2017-08-30 17:36:00 +00:00			`- "hyperkube kubelet"`
			`- "kubelet"`
Reorder YAML to make a bit more sense. Allow for optional components, and a config file that we don’t think exists. 2017-08-31 13:45:16 +00:00			`confs:`
			`- /etc/kubernetes/kubelet.conf`
Corrections to config file substitutions. Use “kubernetes” as a fake component name so we can more easily substitute “kubernetesconf” 2017-08-31 16:39:40 +00:00			`- /etc/kubernetes/kubelet`
			`defaultconf: "/etc/kubernetes/kubelet.conf"`
Add function to get unit files for kubernetes components. 2017-10-15 12:39:29 +00:00
			`unitfiles:`
			`- /etc/systemd/system/kubelet.service.d/10-kubeadm.conf`
			`defaultunitfile: /etc/systemd/system/kubelet.service.d/10-kubeadm.conf`
Reorder YAML to make a bit more sense. Allow for optional components, and a config file that we don’t think exists. 2017-08-31 13:45:16 +00:00
			`proxy:`
			`bins:`
Update the config file 2017-08-30 17:36:00 +00:00			`- "kube-proxy"`
			`- "hyperkube proxy"`
			`- "proxy"`
Reorder YAML to make a bit more sense. Allow for optional components, and a config file that we don’t think exists. 2017-08-31 13:45:16 +00:00			`confs:`
Update the config file 2017-08-30 17:36:00 +00:00			`- /etc/kubernetes/proxy.conf`
			`- /etc/kubernetes/proxy`
			`- /etc/kubernetes/addons/kube-proxy-daemonset.yaml`
Move kubernetes binaries and config paths to kube-bench config. 2017-07-13 00:24:09 +00:00
Update the config file 2017-08-30 17:36:00 +00:00			`federated:`
Reorder YAML to make a bit more sense. Allow for optional components, and a config file that we don’t think exists. 2017-08-31 13:45:16 +00:00			`components:`
			`- fedapiserver`
			`- fedcontrollermanager`

			`fedapiserver:`
			`bins:`
Update the config file 2017-08-30 17:36:00 +00:00			`- "hyperkube federation-apiserver"`
			`- "kube-federation-apiserver"`
			`- "federation-apiserver"`
Reorder YAML to make a bit more sense. Allow for optional components, and a config file that we don’t think exists. 2017-08-31 13:45:16 +00:00
			`fedcontrollermanager:`
			`bins:`
Update the config file 2017-08-30 17:36:00 +00:00			`- "hyperkube federation-controller-manager"`
			`- "kube-federation-controller-manager"`
			`- "federation-controller-manager"`
Move kubernetes binaries and config paths to kube-bench config. 2017-07-13 00:24:09 +00:00
Reorder YAML to make a bit more sense. Allow for optional components, and a config file that we don’t think exists. 2017-08-31 13:45:16 +00:00