1
0
mirror of https://github.com/aquasecurity/kube-bench.git synced 2024-12-19 21:28:07 +00:00

Update config.yaml to add Azure AKS file locations for kubelet (#383)

* testing Azure config locations

* "Updated default config.yaml to incorporate Azure AKS file locations for kubelet"

* "Adjusted order of new lines.  Removed unneeded lines."
This commit is contained in:
Patrick Lieberg 2019-08-22 08:52:34 -05:00 committed by Liz Rice
parent 3fba5f4dac
commit 0d81ef10d5

View File

@ -1,5 +1,5 @@
--- ---
## Controls Files. ## Controls Files.
# These are YAML files that hold all the details for running checks. # These are YAML files that hold all the details for running checks.
# #
## Uncomment to use different control file paths. ## Uncomment to use different control file paths.
@ -12,7 +12,7 @@ master:
- apiserver - apiserver
- scheduler - scheduler
- controllermanager - controllermanager
- etcd - etcd
- flanneld - flanneld
# kubernetes is a component to cover the config file /etc/kubernetes/config that is referred to in the benchmark # kubernetes is a component to cover the config file /etc/kubernetes/config that is referred to in the benchmark
- kubernetes - kubernetes
@ -78,18 +78,26 @@ node:
- kubernetes - kubernetes
kubernetes: kubernetes:
defaultconf: /etc/kubernetes/config defaultconf: "/etc/kubernetes/config"
kubelet: kubelet:
cafile: cafile:
- "/etc/kubernetes/pki/ca.crt" - "/etc/kubernetes/pki/ca.crt"
- "/etc/kubernetes/certs/ca.crt"
svc:
- "/etc/systemd/system/kubelet.service.d/10-kubeadm.conf"
- "/etc/systemd/system/kubelet.service"
bins: bins:
- "hyperkube kubelet" - "hyperkube kubelet"
- "kubelet" - "kubelet"
kubeconfig:
- "/etc/kubernetes/kubelet.conf"
- "/var/lib/kubelet/kubeconfig"
confs: confs:
- "/var/lib/kubelet/config.yaml" - "/var/lib/kubelet/config.yaml"
- "/etc/kubernetes/kubelet/kubelet-config.json" - "/etc/kubernetes/kubelet/kubelet-config.json"
- "/home/kubernetes/kubelet-config.yaml" - "/home/kubernetes/kubelet-config.yaml"
- "/etc/default/kubelet"
defaultconf: "/var/lib/kubelet/config.yaml" defaultconf: "/var/lib/kubelet/config.yaml"
defaultsvc: "/etc/systemd/system/kubelet.service.d/10-kubeadm.conf" defaultsvc: "/etc/systemd/system/kubelet.service.d/10-kubeadm.conf"
defaultkubeconfig: "/etc/kubernetes/kubelet.conf" defaultkubeconfig: "/etc/kubernetes/kubelet.conf"