From d059196b71560a57529af0bc1c02ba912e6b72c9 Mon Sep 17 00:00:00 2001 From: yoavrotems Date: Mon, 25 Mar 2019 14:41:06 +0200 Subject: [PATCH] Update master.yaml Fix 1.1.23 to check *if* --service-account-lookup argument is set and if so then if it's equal to true --- cfg/1.13/master.yaml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/cfg/1.13/master.yaml b/cfg/1.13/master.yaml index 9518b35..38f2195 100644 --- a/cfg/1.13/master.yaml +++ b/cfg/1.13/master.yaml @@ -366,7 +366,10 @@ groups: text: "Ensure that the --service-account-lookup argument is set to true (Scored)" audit: "ps -ef | grep $apiserverbin | grep -v grep" tests: + bin_op: or test_items: + - flag: "--service-account-lookup" + set: false - flag: "--service-account-lookup" compare: op: eq