From 4b28c84b97e4aaa55f082d2faaa897d8beadd5cd Mon Sep 17 00:00:00 2001 From: Ed Robinson Date: Tue, 8 Jun 2021 10:23:43 +0100 Subject: [PATCH] Allow kube-bench to scan Bottlerocket OS (#889) --- cfg/config.yaml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/cfg/config.yaml b/cfg/config.yaml index 2391435..ac6a088 100644 --- a/cfg/config.yaml +++ b/cfg/config.yaml @@ -140,11 +140,13 @@ node: - "/etc/kubernetes/kubelet.conf" - "/var/lib/kubelet/kubeconfig" - "/etc/kubernetes/kubelet-kubeconfig" + - "/etc/kubernetes/kubelet/kubeconfig" - "/var/snap/microk8s/current/credentials/kubelet.config" confs: - "/var/lib/kubelet/config.yaml" - "/var/lib/kubelet/config.yml" - "/etc/kubernetes/kubelet/kubelet-config.json" + - "/etc/kubernetes/kubelet/config" - "/home/kubernetes/kubelet-config.yaml" - "/home/kubernetes/kubelet-config.yml" - "/etc/default/kubeletconfig.json" @@ -183,6 +185,7 @@ node: - /var/snap/microk8s/current/args/kube-proxy kubeconfig: - "/etc/kubernetes/kubelet-kubeconfig" + - "/etc/kubernetes/kubelet/config" - "/var/lib/kubelet/kubeconfig" - "/var/snap/microk8s/current/credentials/proxy.config" svc: