arno/kube-bench
1
0
Fork 0
mirror of https://github.com/aquasecurity/kube-bench.git synced 2024-11-25 09:28:16 +00:00
Code Issues Releases Wiki Activity
faa1b4be3d
kube-bench/job-iks.yaml

39 lines
1012 B
YAML
Raw Normal View History

Support Linting YAML as part of Travis CI build (#554) * add yamllint command to travis CI installs and runs a linter across the YAML in the project to ensure consistency in the written YAML. this uses yamllint and the default yamllint config with "truthy" and "line-length" disabled. * run dos2unix on CRLF files * YAMLLINT: remove trailing spaces * YAMLLint: add YAML document start * YAMLLint: too many spaces around bracket * YAMLLint: fix indentation * YAMLLint: remove duplicate key * YAMLLint: newline at end of file * YAMLLint: Too few spaces after comma * YAMLLint: too many spaces after colon
2020-01-06 09:18:25 +00:00
---
fixes issue #386 (#397) * fixes issue #386 * Correct typo
2019-08-28 08:27:56 +00:00
apiVersion: batch/v1
kind: Job
metadata:
name: kube-bench
spec:
template:
spec:
hostPID: true
containers:
Support Linting YAML as part of Travis CI build (#554) * add yamllint command to travis CI installs and runs a linter across the YAML in the project to ensure consistency in the written YAML. this uses yamllint and the default yamllint config with "truthy" and "line-length" disabled. * run dos2unix on CRLF files * YAMLLINT: remove trailing spaces * YAMLLint: add YAML document start * YAMLLint: too many spaces around bracket * YAMLLint: fix indentation * YAMLLint: remove duplicate key * YAMLLint: newline at end of file * YAMLLint: Too few spaces after comma * YAMLLint: too many spaces after colon
2020-01-06 09:18:25 +00:00
- name: kube-bench
fix: fully qualified image names (#1206)
2022-06-17 15:01:32 +00:00
image: docker.io/aquasec/kube-bench:latest
command:
["kube-bench", "run", "--targets", "node", "--version", "1.20"]
Support Linting YAML as part of Travis CI build (#554) * add yamllint command to travis CI installs and runs a linter across the YAML in the project to ensure consistency in the written YAML. this uses yamllint and the default yamllint config with "truthy" and "line-length" disabled. * run dos2unix on CRLF files * YAMLLINT: remove trailing spaces * YAMLLint: add YAML document start * YAMLLint: too many spaces around bracket * YAMLLint: fix indentation * YAMLLint: remove duplicate key * YAMLLint: newline at end of file * YAMLLint: Too few spaces after comma * YAMLLint: too many spaces after colon
2020-01-06 09:18:25 +00:00
volumeMounts:
- name: var-lib-kubelet
mountPath: /var/lib/kubelet
Set all host-mounted volumes to be read-only. (#569) By setting all host-mounted volumes to be read-only we reduce the likelihood any host filesystem is modified by running kube-bench.
2020-01-28 15:45:31 +00:00
readOnly: true
Support Linting YAML as part of Travis CI build (#554) * add yamllint command to travis CI installs and runs a linter across the YAML in the project to ensure consistency in the written YAML. this uses yamllint and the default yamllint config with "truthy" and "line-length" disabled. * run dos2unix on CRLF files * YAMLLINT: remove trailing spaces * YAMLLint: add YAML document start * YAMLLint: too many spaces around bracket * YAMLLint: fix indentation * YAMLLint: remove duplicate key * YAMLLint: newline at end of file * YAMLLint: Too few spaces after comma * YAMLLint: too many spaces after colon
2020-01-06 09:18:25 +00:00
- name: etc-systemd
mountPath: /etc/systemd
Set all host-mounted volumes to be read-only. (#569) By setting all host-mounted volumes to be read-only we reduce the likelihood any host filesystem is modified by running kube-bench.
2020-01-28 15:45:31 +00:00
readOnly: true
Support Linting YAML as part of Travis CI build (#554) * add yamllint command to travis CI installs and runs a linter across the YAML in the project to ensure consistency in the written YAML. this uses yamllint and the default yamllint config with "truthy" and "line-length" disabled. * run dos2unix on CRLF files * YAMLLINT: remove trailing spaces * YAMLLint: add YAML document start * YAMLLint: too many spaces around bracket * YAMLLint: fix indentation * YAMLLint: remove duplicate key * YAMLLint: newline at end of file * YAMLLint: Too few spaces after comma * YAMLLint: too many spaces after colon
2020-01-06 09:18:25 +00:00
- name: etc-kubernetes
mountPath: /etc/kubernetes
Set all host-mounted volumes to be read-only. (#569) By setting all host-mounted volumes to be read-only we reduce the likelihood any host filesystem is modified by running kube-bench.
2020-01-28 15:45:31 +00:00
readOnly: true
Support Linting YAML as part of Travis CI build (#554) * add yamllint command to travis CI installs and runs a linter across the YAML in the project to ensure consistency in the written YAML. this uses yamllint and the default yamllint config with "truthy" and "line-length" disabled. * run dos2unix on CRLF files * YAMLLINT: remove trailing spaces * YAMLLint: add YAML document start * YAMLLint: too many spaces around bracket * YAMLLint: fix indentation * YAMLLint: remove duplicate key * YAMLLint: newline at end of file * YAMLLint: Too few spaces after comma * YAMLLint: too many spaces after colon
2020-01-06 09:18:25 +00:00
restartPolicy: Never
volumes:
fixes issue #386 (#397) * fixes issue #386 * Correct typo
2019-08-28 08:27:56 +00:00
- name: var-lib-kubelet
Support Linting YAML as part of Travis CI build (#554) * add yamllint command to travis CI installs and runs a linter across the YAML in the project to ensure consistency in the written YAML. this uses yamllint and the default yamllint config with "truthy" and "line-length" disabled. * run dos2unix on CRLF files * YAMLLINT: remove trailing spaces * YAMLLint: add YAML document start * YAMLLint: too many spaces around bracket * YAMLLint: fix indentation * YAMLLint: remove duplicate key * YAMLLint: newline at end of file * YAMLLint: Too few spaces after comma * YAMLLint: too many spaces after colon
2020-01-06 09:18:25 +00:00
hostPath:
path: "/var/lib/kubelet"
fixes issue #386 (#397) * fixes issue #386 * Correct typo
2019-08-28 08:27:56 +00:00
- name: etc-systemd
Support Linting YAML as part of Travis CI build (#554) * add yamllint command to travis CI installs and runs a linter across the YAML in the project to ensure consistency in the written YAML. this uses yamllint and the default yamllint config with "truthy" and "line-length" disabled. * run dos2unix on CRLF files * YAMLLINT: remove trailing spaces * YAMLLint: add YAML document start * YAMLLint: too many spaces around bracket * YAMLLint: fix indentation * YAMLLint: remove duplicate key * YAMLLint: newline at end of file * YAMLLint: Too few spaces after comma * YAMLLint: too many spaces after colon
2020-01-06 09:18:25 +00:00
hostPath:
path: "/lib/systemd"
fixes issue #386 (#397) * fixes issue #386 * Correct typo
2019-08-28 08:27:56 +00:00
- name: etc-kubernetes
Support Linting YAML as part of Travis CI build (#554) * add yamllint command to travis CI installs and runs a linter across the YAML in the project to ensure consistency in the written YAML. this uses yamllint and the default yamllint config with "truthy" and "line-length" disabled. * run dos2unix on CRLF files * YAMLLINT: remove trailing spaces * YAMLLint: add YAML document start * YAMLLint: too many spaces around bracket * YAMLLint: fix indentation * YAMLLint: remove duplicate key * YAMLLint: newline at end of file * YAMLLint: Too few spaces after comma * YAMLLint: too many spaces after colon
2020-01-06 09:18:25 +00:00
hostPath:
path: "/etc/kubernetes"
- name: usr-bin
hostPath:
path: "/usr/bin"
Reference in New Issue Copy Permalink