1
0
mirror of https://github.com/aquasecurity/kube-bench.git synced 2024-11-15 20:39:08 +00:00

Merge pull request #233 from aquasecurity/clean-ocp-configs

Clean up OCP benchmark config.
This commit is contained in:
Liz Rice 2019-03-07 09:30:18 +00:00 committed by GitHub
commit 8745df170a
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 5 additions and 10 deletions

View File

@ -11,25 +11,20 @@ master:
apiserver:
bins:
- openshift start master api
defaultconf: /etc/origin/master/master-config.yaml
scheduler:
bins:
- openshift start master controllers
defaultconf: /etc/origin/master/master-config.yaml
controllermanager:
bins:
- openshift start master controllers
defaultconf: /etc/origin/master/master-config.yaml
etcd:
defaultconf: /etc/kubernetes/manifests/etcd.yaml
node:
kubelet:
defaultconf: /etc/kubernetes/kubelet.conf
defaultsvc: /etc/systemd/system/kubelet.service.d/10-kubeadm.conf
bins:
- openshift start network
proxy:
defaultconf: /etc/kubernetes/addons/kube-proxy-daemonset.yaml
bins:
- openshift start network

View File

@ -1043,7 +1043,7 @@ groups:
remediation: |
On the etcd server node, get the etcd data directory, passed as an argument --data-dir ,
from the below command:
ps -ef | grep $etcdbin
ps -ef | grep etcd
Run the below command (based on the etcd data directory found above). For example,
chmod 700 /var/lib/etcd
scored: true