1
0
mirror of https://github.com/aquasecurity/kube-bench.git synced 2025-06-02 14:19:09 +00:00

[GH-191] explained that master nodes cannot be inspected in managed k8s

This commit is contained in:
030 2019-06-01 16:40:45 +02:00
parent e64f61fa7f
commit 9d0e3491a0

View File

@ -5,7 +5,7 @@
<img src="images/kube-bench.png" width="200" alt="kube-bench logo"> <img src="images/kube-bench.png" width="200" alt="kube-bench logo">
kube-bench is a Go application that checks whether Kubernetes is deployed securely by running the checks documented in the [CIS Kubernetes Benchmark](https://www.cisecurity.org/benchmark/kubernetes/). kube-bench is a Go application that checks whether Kubernetes is deployed securely by running the checks documented in the [CIS Kubernetes Benchmark](https://www.cisecurity.org/benchmark/kubernetes/). Note that it is impossible to inspect master nodes of managed clusters, e.g. GKE, EKS and AKS, using kube-bench as one does not have access to such nodes.
Tests are configured with YAML files, making this tool easy to update as test specifications evolve. Tests are configured with YAML files, making this tool easy to update as test specifications evolve.