From 3e3aa0ed824048868e62bae636bd903c3d9de12d Mon Sep 17 00:00:00 2001 From: Abubakr-Sadik Nii Nai Davis Date: Thu, 24 Aug 2017 18:30:25 +0000 Subject: [PATCH] Change node check 2.1.6 to use operation `noteq` instead of `gt`. Kubelet option --streaming-connection-idle-timeout expects a string value which fails parsing to integer for greater than comparison. The string "0" indicates no timeout and this is what we are checking for. --- cfg/node.yaml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/cfg/node.yaml b/cfg/node.yaml index dfff376..a146baa 100644 --- a/cfg/node.yaml +++ b/cfg/node.yaml @@ -79,10 +79,11 @@ groups: text: "Ensure that the --streaming-connection-idle-timeout argument is not set to 0 (Scored)" audit: "ps -ef | grep $kubeletbin | grep -v grep" tests: + bin_op: or test_items: - flag: "--streaming-connection-idle-timeout" compare: - op: gt + op: noteq value: 0 set: true remediation: "Edit the $kubeletconf file on each node and set the KUBELET_ARGS