arno/kube-bench
1
0
Fork 0
mirror of https://github.com/aquasecurity/kube-bench.git synced 2024-12-30 10:28:09 +00:00
Code Issues Releases Wiki Activity
fc4fe38bc2
kube-bench/cfg/config.yaml

112 lines
2.5 KiB
YAML
Raw Normal View History

Initial commit
2017-05-26 09:25:29 +00:00
---
## Controls Files.
# These are YAML files that hold all the details for running checks.
#
## Uncomment to use different control file paths.
No need to run install.sh. Simply clone the project, compile the go app and run ./cis_kubernetes
2017-06-19 21:03:46 +00:00
# masterControls: ./cfg/master.yaml
# nodeControls: ./cfg/node.yaml
# federatedControls: ./cfg/federated.yaml
Initial commit
2017-05-26 09:25:29 +00:00
Update the config file
2017-08-30 17:36:00 +00:00
master:
Reorder YAML to make a bit more sense. Allow for optional components, and a config file that we don’t think exists.
2017-08-31 13:45:16 +00:00
components:
- apiserver
- scheduler
- controllermanager
- etcd
- flanneld
Corrections to config file substitutions. Use “kubernetes” as a fake component name so we can more easily substitute “kubernetesconf”
2017-08-31 16:39:40 +00:00
# kubernetes is a component to cover the config file /etc/kubernetes/config that is referred to in the benchmark
Reorder YAML to make a bit more sense. Allow for optional components, and a config file that we don’t think exists.
2017-08-31 13:45:16 +00:00
- kubernetes
kubernetes:
defaultconf: /etc/kubernetes/config
apiserver:
bins:
Update the config file
2017-08-30 17:36:00 +00:00
- "kube-apiserver"
- "hyperkube apiserver"
- "apiserver"
Reorder YAML to make a bit more sense. Allow for optional components, and a config file that we don’t think exists.
2017-08-31 13:45:16 +00:00
confs:
- /etc/kubernetes/apiserver.conf
- /etc/kubernetes/apiserver
defaultconf: /etc/kubernetes/apiserver
scheduler:
bins:
Update the config file
2017-08-30 17:36:00 +00:00
- "kube-scheduler"
- "hyperkube scheduler"
- "scheduler"
Reorder YAML to make a bit more sense. Allow for optional components, and a config file that we don’t think exists.
2017-08-31 13:45:16 +00:00
confs:
- /etc/kubernetes/scheduler.conf
- /etc/kubernetes/scheduler
defaultconf: /etc/kubernetes/scheduler
controllermanager:
bins:
Update the config file
2017-08-30 17:36:00 +00:00
- "kube-controller-manager"
- "hyperkube controller-manager"
- "controller-manager"
Reorder YAML to make a bit more sense. Allow for optional components, and a config file that we don’t think exists.
2017-08-31 13:45:16 +00:00
confs:
Update the config file
2017-08-30 17:36:00 +00:00
- /etc/kubernetes/controller-manager.conf
- /etc/kubernetes/controller-manager
Reorder YAML to make a bit more sense. Allow for optional components, and a config file that we don’t think exists.
2017-08-31 13:45:16 +00:00
defaultconf: /etc/kubernetes/controller-manager
etcd:
optional: true
bins:
- "etcd"
confs:
Update the config file
2017-08-30 17:36:00 +00:00
- /etc/etcd/etcd.conf
Reorder YAML to make a bit more sense. Allow for optional components, and a config file that we don’t think exists.
2017-08-31 13:45:16 +00:00
defaultconf: /etc/etcd/etcd.conf
flanneld:
optional: true
bins:
- flanneld
defaultconf: /etc/sysconfig/flanneld
Update the config file
2017-08-30 17:36:00 +00:00
node:
Reorder YAML to make a bit more sense. Allow for optional components, and a config file that we don’t think exists.
2017-08-31 13:45:16 +00:00
components:
- kubelet
- proxy
Corrections to config file substitutions. Use “kubernetes” as a fake component name so we can more easily substitute “kubernetesconf”
2017-08-31 16:39:40 +00:00
# kubernetes is a component to cover the config file /etc/kubernetes/config that is referred to in the benchmark
- kubernetes
kubernetes:
defaultconf: /etc/kubernetes/config
Reorder YAML to make a bit more sense. Allow for optional components, and a config file that we don’t think exists.
2017-08-31 13:45:16 +00:00
kubelet:
bins:
Update the config file
2017-08-30 17:36:00 +00:00
- "hyperkube kubelet"
- "kubelet"
Reorder YAML to make a bit more sense. Allow for optional components, and a config file that we don’t think exists.
2017-08-31 13:45:16 +00:00
confs:
- /etc/kubernetes/kubelet.conf
Corrections to config file substitutions. Use “kubernetes” as a fake component name so we can more easily substitute “kubernetesconf”
2017-08-31 16:39:40 +00:00
- /etc/kubernetes/kubelet
defaultconf: "/etc/kubernetes/kubelet.conf"
Add function to get unit files for kubernetes components.
2017-10-15 12:39:29 +00:00
Reorder YAML to make a bit more sense. Allow for optional components, and a config file that we don’t think exists.
2017-08-31 13:45:16 +00:00
proxy:
bins:
Update the config file
2017-08-30 17:36:00 +00:00
- "kube-proxy"
- "hyperkube proxy"
- "proxy"
Reorder YAML to make a bit more sense. Allow for optional components, and a config file that we don’t think exists.
2017-08-31 13:45:16 +00:00
confs:
Update the config file
2017-08-30 17:36:00 +00:00
- /etc/kubernetes/proxy.conf
- /etc/kubernetes/proxy
- /etc/kubernetes/addons/kube-proxy-daemonset.yaml
Move kubernetes binaries and config paths to kube-bench config.
2017-07-13 00:24:09 +00:00
Update the config file
2017-08-30 17:36:00 +00:00
federated:
Reorder YAML to make a bit more sense. Allow for optional components, and a config file that we don’t think exists.
2017-08-31 13:45:16 +00:00
components:
- fedapiserver
- fedcontrollermanager
fedapiserver:
bins:
Update the config file
2017-08-30 17:36:00 +00:00
- "hyperkube federation-apiserver"
- "kube-federation-apiserver"
- "federation-apiserver"
Reorder YAML to make a bit more sense. Allow for optional components, and a config file that we don’t think exists.
2017-08-31 13:45:16 +00:00
fedcontrollermanager:
bins:
Update the config file
2017-08-30 17:36:00 +00:00
- "hyperkube federation-controller-manager"
- "kube-federation-controller-manager"
- "federation-controller-manager"
Reference in New Issue Copy Permalink