arno/kube-bench
1
0
Fork 0
mirror of https://github.com/aquasecurity/kube-bench.git synced 2025-03-21 09:55:42 +00:00
Code Issues Releases Wiki Activity

Correction to 1.13 and 1.13-json test 2.1.5 (#380)

Browse Source
This commit is contained in:
Efrat Levitan 2019-08-07 13:33:09 +03:00 committed by Liz Rice
parent 22b971a633
commit b8a463f051
2 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
cfg/1.11/node.yaml
View File

@ -114,12 +114,15 @@ groups:
text: "Ensure that the --streaming-connection-idle-timeout argument is not set to 0 (Scored)"
audit: "ps -fC $kubeletbin"
tests:
bin_op: or
test_items:
- flag: "--streaming-connection-idle-timeout"
compare:
op: noteq
value: 0
set: true
- flag: "--streaming-connection-idle-timeout"
set: false
remediation: |
If using a Kubelet config file, edit the file to set streamingConnectionIdleTimeout to a
value other than 0.

3
cfg/1.13/node.yaml
View File

@ -95,12 +95,15 @@ groups:
text: "Ensure that the --streaming-connection-idle-timeout argument is not set to 0 (Scored)"
audit: "ps -fC $kubeletbin"
tests:
bin_op: or
test_items:
- flag: "--streaming-connection-idle-timeout"
compare:
op: noteq
value: 0
set: true
- flag: "--streaming-connection-idle-timeout"
set: false
remediation: |
If using a Kubelet config file, edit the file to set streamingConnectionIdleTimeout to a
value other than 0.