mirror of
https://github.com/aquasecurity/kube-bench.git
synced 2024-11-25 17:38:21 +00:00
mount /etc/passwd and /etc/group for etcd ownership related checks
Changes to job-master.yaml are also needed in job.yaml to properly check ownership of etcd data dir
This commit is contained in:
parent
59760891bd
commit
8e23656e09
12
job.yaml
12
job.yaml
@ -50,6 +50,12 @@ spec:
|
||||
- name: opt-cni-bin
|
||||
mountPath: /opt/cni/bin/
|
||||
readOnly: true
|
||||
- name: etc-passwd
|
||||
mountPath: /etc/passwd
|
||||
readOnly: true
|
||||
- name: etc-group
|
||||
mountPath: /etc/group
|
||||
readOnly: true
|
||||
restartPolicy: Never
|
||||
volumes:
|
||||
- name: var-lib-etcd
|
||||
@ -85,3 +91,9 @@ spec:
|
||||
- name: opt-cni-bin
|
||||
hostPath:
|
||||
path: "/opt/cni/bin/"
|
||||
- name: etc-passwd
|
||||
hostPath:
|
||||
path: "/etc/passwd"
|
||||
- name: etc-group
|
||||
hostPath:
|
||||
path: "/etc/group"
|
||||
|
Loading…
Reference in New Issue
Block a user