1
0
mirror of https://github.com/aquasecurity/kube-bench.git synced 2024-11-25 17:38:21 +00:00

mount /etc/passwd and /etc/group for etcd ownership related checks

Changes to job-master.yaml are also needed in job.yaml to properly check ownership of etcd data dir
This commit is contained in:
Karina Murawko-Wisniewska 2022-09-13 10:44:37 +02:00 committed by GitHub
parent 59760891bd
commit 8e23656e09
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -50,6 +50,12 @@ spec:
- name: opt-cni-bin
mountPath: /opt/cni/bin/
readOnly: true
- name: etc-passwd
mountPath: /etc/passwd
readOnly: true
- name: etc-group
mountPath: /etc/group
readOnly: true
restartPolicy: Never
volumes:
- name: var-lib-etcd
@ -85,3 +91,9 @@ spec:
- name: opt-cni-bin
hostPath:
path: "/opt/cni/bin/"
- name: etc-passwd
hostPath:
path: "/etc/passwd"
- name: etc-group
hostPath:
path: "/etc/group"