issue #337: Adds comment for properties detected thru parsing command line. Fixed Audit for test 2.1.8 (#354)

pull/361/head
Roberto Rojas 5 years ago committed by Liz Rice
parent d127512ab9
commit 3926ba3977

@ -10,6 +10,9 @@ groups:
checks:
- id: 2.1.1
text: "Ensure that the --allow-privileged argument is set to false (Scored)"
# This is one of those properties that can only be set as a command line argument.
# To check if the property is set as expected, we need to parse the kubelet command
# instead reading the Kubelet Configuration file.
audit: "ps -fC $kubeletbin"
tests:
test_items:

@ -160,7 +160,10 @@ groups:
- id: 2.1.8
text: "Ensure that the --hostname-override argument is not set (Scored)"
audit: "cat $kubeletconf"
# This is one of those properties that can only be set as a command line argument.
# To check if the property is set as expected, we need to parse the kubelet command
# instead reading the Kubelet Configuration file.
audit: "ps -fC $kubeletbin"
tests:
test_items:
- flag: "--hostname-override"
@ -221,7 +224,10 @@ groups:
- id: 2.1.11
text: "Ensure that the --cadvisor-port argument is set to 0 (Scored)"
audit: "cat $kubeletconf"
# This is one of those properties that can only be set as a command line argument.
# To check if the property is set as expected, we need to parse the kubelet command
# instead reading the Kubelet Configuration file.
audit: "ps -fC $kubeletbin"
tests:
bin_op: or
test_items:

Loading…
Cancel
Save