1
0
mirror of https://github.com/aquasecurity/kube-bench.git synced 2025-08-03 04:18:12 +00:00

Resolve linting issues in YAML file

This commit is contained in:
Deepanshu Bhatia 2025-02-20 23:20:54 +05:30
parent 4ba6a0cfda
commit 9a9adcd16d

View File

@ -19,28 +19,28 @@ metadata:
app: kube-bench app: kube-bench
name: kube-bench-cluster-role name: kube-bench-cluster-role
rules: rules:
- apiGroups: - apiGroups:
- '*' - '*'
resources: resources:
- '*' - '*'
verbs: verbs:
- 'get' - 'get'
- 'list' - 'list'
- apiGroups: - apiGroups:
- '*' - '*'
resources: resources:
- 'pods/exec' - 'pods/exec'
verbs: verbs:
- 'create' - 'create'
- apiGroups: - apiGroups:
- '*' - '*'
resources: resources:
- 'pods' - 'pods'
- 'namespaces' - 'namespaces'
verbs: verbs:
- 'create' - 'create'
- 'delete' - 'delete'
- 'watch' - 'watch'
--- ---
apiVersion: rbac.authorization.k8s.io/v1 apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding kind: ClusterRoleBinding
@ -53,10 +53,10 @@ roleRef:
kind: ClusterRole kind: ClusterRole
name: kube-bench-cluster-role name: kube-bench-cluster-role
subjects: subjects:
- kind: ServiceAccount - kind: ServiceAccount
name: kube-bench-sa name: kube-bench-sa
# It is mandatory to give namespace here and it doesn't pick the one mentioned in kubeconfig file. # It is mandatory to give namespace here and it doesn't pick the one mentioned in kubeconfig file.
namespace: kube-bench namespace: kube-bench
# In kube-bench pod for Openshift, oc cli creates random namespaces to deploy debug pods for CIS checks. # In kube-bench pod for Openshift, oc cli creates random namespaces to deploy debug pods for CIS checks.
# So, it will need privileged access. # So, it will need privileged access.
--- ---
@ -71,9 +71,9 @@ roleRef:
kind: ClusterRole kind: ClusterRole
name: system:openshift:scc:privileged name: system:openshift:scc:privileged
subjects: subjects:
- kind: ServiceAccount - kind: ServiceAccount
name: kube-bench-sa name: kube-bench-sa
namespace: kube-bench namespace: kube-bench
--- ---
apiVersion: batch/v1 apiVersion: batch/v1
kind: Job kind: Job