From c87c5cfb515c98f2924725f212654252d429e06c Mon Sep 17 00:00:00 2001 From: Roberto Rojas Date: Sat, 13 Jul 2019 02:35:44 -0400 Subject: [PATCH] Fixes bugs on tests 2.1.4 and 2.1.5 - 1.13-json (#365) * Adds bin_op to Test 2.1.4 * Adds bin_op to Test 2.1.5 --- cfg/1.13-json/node.yaml | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/cfg/1.13-json/node.yaml b/cfg/1.13-json/node.yaml index a061dc4..3f7c2b2 100644 --- a/cfg/1.13-json/node.yaml +++ b/cfg/1.13-json/node.yaml @@ -74,12 +74,15 @@ groups: text: "Ensure that the --read-only-port argument is set to 0 (Scored)" audit: "cat $kubeletconf" tests: + bin_op: or test_items: - path: "{.readOnlyPort}" compare: op: eq value: 0 set: true + - path: "{.readOnlyPort}" + set: false remediation: | If using a Kubelet config file, edit the file to set readOnlyPort to 0 . If using command line arguments, edit the kubelet service file @@ -95,12 +98,15 @@ groups: text: "Ensure that the --streaming-connection-idle-timeout argument is not set to 0 (Scored)" audit: "cat $kubeletconf" tests: + bin_op: or test_items: - path: "{.streamingConnectionIdleTimeout}" compare: op: noteq value: 0 set: true + - path: "{.streamingConnectionIdleTimeout}" + set: false remediation: | If using a Kubelet config file, edit the file to set streamingConnectionIdleTimeout to a value other than 0.