arno/kube-bench
1
0
Fork 0
mirror of https://github.com/aquasecurity/kube-bench.git synced 2025-01-13 17:21:03 +00:00
Code Issues Releases Wiki Activity

cfg: add /etc/default/kubeletconfig.json for AKS (#865)

Browse Source 
* cfg: add `/etc/default/kubeletconfig.json`

* fix(cfg): search kubeletconfig.json first

* feat: mount `/etc/default` from host for AKS cluster

Co-authored-by: Yoav Rotem <yoavrotems97@gmail.com>
This commit is contained in:
hbc 2021-05-11 17:37:25 +08:00 committed by GitHub
parent 47c2494728
commit e4d9455820
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
cfg/config.yaml
View File

@ -147,6 +147,7 @@ node:
- "/etc/kubernetes/kubelet/kubelet-config.json" - "/etc/kubernetes/kubelet/kubelet-config.json"
- "/home/kubernetes/kubelet-config.yaml" - "/home/kubernetes/kubelet-config.yaml"
- "/home/kubernetes/kubelet-config.yml" - "/home/kubernetes/kubelet-config.yml"
- "/etc/default/kubeletconfig.json"
- "/etc/default/kubelet" - "/etc/default/kubelet"
- "/var/lib/kubelet/kubeconfig" - "/var/lib/kubelet/kubeconfig"
- "/var/snap/kubelet/current/args" - "/var/snap/kubelet/current/args"

6
job-aks.yaml
View File

@ -18,6 +18,9 @@ spec:
- name: etc-systemd - name: etc-systemd
mountPath: /etc/systemd mountPath: /etc/systemd
readOnly: true readOnly: true
- name: etc-default
mountPath: /etc/default
readOnly: true
- name: etc-kubernetes - name: etc-kubernetes
mountPath: /etc/kubernetes mountPath: /etc/kubernetes
readOnly: true readOnly: true
@ -29,6 +32,9 @@ spec:
- name: etc-systemd - name: etc-systemd
hostPath: hostPath:
path: "/etc/systemd" path: "/etc/systemd"
- name: etc-default
hostPath:
path: "/etc/default"
- name: etc-kubernetes - name: etc-kubernetes
hostPath: hostPath:
path: "/etc/kubernetes" path: "/etc/kubernetes"