arno/kube-bench
1
0
Fork 0
mirror of https://github.com/aquasecurity/kube-bench.git synced 2025-05-06 08:59:42 +00:00
Code Issues Releases Wiki Activity

Updating checks 4.2.1 and 4.2.3 (#1236)

Browse Source 
Removing colon from these checks so that grep command will work with both communication method (YAML and JSON)
This commit is contained in:
Anupam Tamrakar 2022-08-09 00:24:37 +05:30 committed by GitHub
parent af7e0c0f0b
commit 7a68b38763
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
cfg/rh-1.0/node.yaml
View File

@ -186,7 +186,7 @@ groups:
audit: | audit: |
for node in $(oc get nodes -o jsonpath='{.items[*].metadata.name}') for node in $(oc get nodes -o jsonpath='{.items[*].metadata.name}')
do do
oc debug node/${node} -- chroot /host grep -B4 -A1 anonymous: /etc/kubernetes/kubelet.conf oc debug node/${node} -- chroot /host grep -B4 -A1 anonymous /etc/kubernetes/kubelet.conf
done done
use_multiple_values: true use_multiple_values: true
tests: tests:
@ -222,7 +222,7 @@ groups:
audit: | audit: |
for node in $(oc get nodes -o jsonpath='{.items[*].metadata.name}') for node in $(oc get nodes -o jsonpath='{.items[*].metadata.name}')
do do
oc debug node/${node} -- chroot /host grep clientCAFile: /etc/kubernetes/kubelet.conf oc debug node/${node} -- chroot /host grep clientCAFile /etc/kubernetes/kubelet.conf
done 2> /dev/null done 2> /dev/null
use_multiple_values: true use_multiple_values: true
tests: tests: