arno/kube-bench
1
0
Fork 0
mirror of https://github.com/aquasecurity/kube-bench.git synced 2024-12-24 07:28:06 +00:00
Code Issues Releases Wiki Activity

fixes issue #346 by explicitly only checking read-only property (#404)

Browse Source
This commit is contained in:
Roberto Rojas 2019-08-30 03:56:48 -04:00 committed by Liz Rice
parent 4b5a877f1f
commit 7a53806863
2 changed files with 0 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
cfg/1.11-json/node.yaml
View File

@ -96,10 +96,7 @@ groups:
text: "Ensure that the --read-only-port argument is set to 0 (Scored)" text: "Ensure that the --read-only-port argument is set to 0 (Scored)"
audit: "cat $kubeletconf" audit: "cat $kubeletconf"
tests: tests:
bin_op: or
test_items: test_items:
- path: "{.readOnlyPort}"
set: false
- path: "{.readOnlyPort}" - path: "{.readOnlyPort}"
compare: compare:
op: eq op: eq

3
cfg/1.13-json/node.yaml
View File

@ -74,15 +74,12 @@ groups:
text: "Ensure that the --read-only-port argument is set to 0 (Scored)" text: "Ensure that the --read-only-port argument is set to 0 (Scored)"
audit: "cat $kubeletconf" audit: "cat $kubeletconf"
tests: tests:
bin_op: or
test_items: test_items:
- path: "{.readOnlyPort}" - path: "{.readOnlyPort}"
compare: compare:
op: eq op: eq
value: 0 value: 0
set: true set: true
- path: "{.readOnlyPort}"
set: false
remediation: | remediation: |
If using a Kubelet config file, edit the file to set readOnlyPort to 0 . If using a Kubelet config file, edit the file to set readOnlyPort to 0 .
If using command line arguments, edit the kubelet service file If using command line arguments, edit the kubelet service file