mirror of
https://github.com/aquasecurity/kube-bench.git
synced 2025-08-03 04:18:12 +00:00
Resolve linting issues in YAML file
This commit is contained in:
parent
4ba6a0cfda
commit
9a9adcd16d
58
job-ocp.yaml
58
job-ocp.yaml
@ -19,28 +19,28 @@ metadata:
|
|||||||
app: kube-bench
|
app: kube-bench
|
||||||
name: kube-bench-cluster-role
|
name: kube-bench-cluster-role
|
||||||
rules:
|
rules:
|
||||||
- apiGroups:
|
- apiGroups:
|
||||||
- '*'
|
- '*'
|
||||||
resources:
|
resources:
|
||||||
- '*'
|
- '*'
|
||||||
verbs:
|
verbs:
|
||||||
- 'get'
|
- 'get'
|
||||||
- 'list'
|
- 'list'
|
||||||
- apiGroups:
|
- apiGroups:
|
||||||
- '*'
|
- '*'
|
||||||
resources:
|
resources:
|
||||||
- 'pods/exec'
|
- 'pods/exec'
|
||||||
verbs:
|
verbs:
|
||||||
- 'create'
|
- 'create'
|
||||||
- apiGroups:
|
- apiGroups:
|
||||||
- '*'
|
- '*'
|
||||||
resources:
|
resources:
|
||||||
- 'pods'
|
- 'pods'
|
||||||
- 'namespaces'
|
- 'namespaces'
|
||||||
verbs:
|
verbs:
|
||||||
- 'create'
|
- 'create'
|
||||||
- 'delete'
|
- 'delete'
|
||||||
- 'watch'
|
- 'watch'
|
||||||
---
|
---
|
||||||
apiVersion: rbac.authorization.k8s.io/v1
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
kind: ClusterRoleBinding
|
kind: ClusterRoleBinding
|
||||||
@ -53,10 +53,10 @@ roleRef:
|
|||||||
kind: ClusterRole
|
kind: ClusterRole
|
||||||
name: kube-bench-cluster-role
|
name: kube-bench-cluster-role
|
||||||
subjects:
|
subjects:
|
||||||
- kind: ServiceAccount
|
- kind: ServiceAccount
|
||||||
name: kube-bench-sa
|
name: kube-bench-sa
|
||||||
# It is mandatory to give namespace here and it doesn't pick the one mentioned in kubeconfig file.
|
# It is mandatory to give namespace here and it doesn't pick the one mentioned in kubeconfig file.
|
||||||
namespace: kube-bench
|
namespace: kube-bench
|
||||||
# In kube-bench pod for Openshift, oc cli creates random namespaces to deploy debug pods for CIS checks.
|
# In kube-bench pod for Openshift, oc cli creates random namespaces to deploy debug pods for CIS checks.
|
||||||
# So, it will need privileged access.
|
# So, it will need privileged access.
|
||||||
---
|
---
|
||||||
@ -71,9 +71,9 @@ roleRef:
|
|||||||
kind: ClusterRole
|
kind: ClusterRole
|
||||||
name: system:openshift:scc:privileged
|
name: system:openshift:scc:privileged
|
||||||
subjects:
|
subjects:
|
||||||
- kind: ServiceAccount
|
- kind: ServiceAccount
|
||||||
name: kube-bench-sa
|
name: kube-bench-sa
|
||||||
namespace: kube-bench
|
namespace: kube-bench
|
||||||
---
|
---
|
||||||
apiVersion: batch/v1
|
apiVersion: batch/v1
|
||||||
kind: Job
|
kind: Job
|
||||||
|
Loading…
Reference in New Issue
Block a user