arno/kube-bench
1
0
Fork 0
mirror of https://github.com/aquasecurity/kube-bench.git synced 2025-01-14 09:40:54 +00:00
Code Issues Releases Wiki Activity

By default --make-iptables-util-chain is true, so PASS if this flag is not set.

Browse Source
This commit is contained in:
Abubakr-Sadik Nii Nai Davis 2018-11-07 23:57:38 +00:00
parent ed7f6cf3fc
commit 0a5358665e
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
cfg/1.11/node.yaml
View File

@ -164,6 +164,8 @@ groups:
op: eq op: eq
value: true value: true
set: true set: true
- flag: "--make-iptables-util-chains"
set: false
remediation: | remediation: |
If using a Kubelet config file, edit the file to set makeIPTablesUtilChains: true . If using a Kubelet config file, edit the file to set makeIPTablesUtilChains: true .
If using command line arguments, edit the kubelet service file If using command line arguments, edit the kubelet service file