diff --git a/README.md b/README.md index ed8852d..2f8086c 100644 --- a/README.md +++ b/README.md @@ -5,7 +5,9 @@ kube-bench logo -kube-bench is a Go application that checks whether Kubernetes is deployed securely by running the checks documented in the [CIS Kubernetes Benchmark](https://www.cisecurity.org/benchmark/kubernetes/). +kube-bench is a Go application that checks whether Kubernetes is deployed securely by running the checks documented in the [CIS Kubernetes Benchmark](https://www.cisecurity.org/benchmark/kubernetes/). + +Note that it is impossible to inspect the master nodes of managed clusters, e.g. GKE, EKS and AKS, using kube-bench as one does not have access to such nodes, although it is still possible to use kube-bench to check worker node configuration in these environments. Tests are configured with YAML files, making this tool easy to update as test specifications evolve. diff --git a/cfg/ocp-3.10/config.yaml b/cfg/ocp-3.10/config.yaml index c63b27b..df15172 100644 --- a/cfg/ocp-3.10/config.yaml +++ b/cfg/ocp-3.10/config.yaml @@ -4,7 +4,18 @@ master: apiserver: bins: + - openshift start master api - hypershift openshift-kube-apiserver + + scheduler: + bins: + - "openshift start master controllers" + confs: + - /etc/origin/master/scheduler.json + + controllermanager: + bins: + - "openshift start master controllers" etcd: bins: