[GH-191] explained that master nodes cannot be inspected in managed k8s

5 years ago · 9d0e3491a0
parent e64f61fa7f
commit 9d0e3491a0
1 changed files with 1 additions and 1 deletions
--- a/README.md
+++ b/README.md
@ -5,7 +5,7 @@

 <img src="images/kube-bench.png" width="200" alt="kube-bench logo">

-kube-bench is a Go application that checks whether Kubernetes is deployed securely by running the checks documented in the [CIS Kubernetes Benchmark](https://www.cisecurity.org/benchmark/kubernetes/).
+kube-bench is a Go application that checks whether Kubernetes is deployed securely by running the checks documented in the [CIS Kubernetes Benchmark](https://www.cisecurity.org/benchmark/kubernetes/). Note that it is impossible to inspect master nodes of managed clusters, e.g. GKE, EKS and AKS, using kube-bench as one does not have access to such nodes.

 Tests are configured with YAML files, making this tool easy to update as test specifications evolve.