arno/kube-bench
1
0
Fork 0
mirror of https://github.com/aquasecurity/kube-bench.git synced 2024-12-18 20:58:10 +00:00
Code Issues Releases Wiki Activity

Update README.md

Browse Source 
Specify `-t` to get colour in the Docker output.
Added a note about mounting kubectl or kubelet to get the version.
This commit is contained in:
Luke Bond 2018-09-03 23:05:48 +01:00 committed by GitHub
parent ff59938f94
commit 8894b1dc4f
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
README.md
View File

@ -28,15 +28,17 @@ You can choose to
You can avoid installing kube-bench on the host by running it inside a container using the host PID namespace. You can avoid installing kube-bench on the host by running it inside a container using the host PID namespace.
``` ```
docker run --pid=host aquasec/kube-bench:latest <master|node> docker run --pid=host -t aquasec/kube-bench:latest <master|node>
``` ```
You can even use your own configs by mounting them over the default ones in `/opt/kube-bench/cfg/` You can even use your own configs by mounting them over the default ones in `/opt/kube-bench/cfg/`
``` ```
docker run --pid=host -v path/to/my-config.yaml:/opt/kube-bench/cfg/config.yaml aquasec/kube-bench:latest <master|node> docker run --pid=host -t -v path/to/my-config.yaml:/opt/kube-bench/cfg/config.yaml aquasec/kube-bench:latest <master|node>
``` ```
> Note: the tests require either the kubelet or kubectl binary in the path in order to know the Kubernetes version. You can pass `-v $(which kubectl):/usr/bin/kubectl` to the above invocations to resolve this.
### Running in a kubernetes cluster ### Running in a kubernetes cluster
Run the master check Run the master check