b5f3299e92
Merge branch 'master' into document-output
5 years ago
df556c2f42
Add CIS & Kubernetes version mapping to README
5 years ago
488f5221ef
Document output states
...
Also describe how tests can be omitted by editing the YAML
5 years ago
5baf81a70a
Adds master node detection and a root command that automatically detect checks to run.
...
The root command will run node checks and if possible master checks.
I've also added some Makefile targets to improve local testing and improve the documentation.
5 years ago
79427e185e
Merge branch 'master' into patch-1
5 years ago
6b9ceae9d4
True for Windows too
5 years ago
2a9a02f25b
warn osx limitation
5 years ago
8021610e46
For #197 - create job YAML files that mount host volumes as needed
5 years ago
3a662b3ff6
Merge branch 'master' into doc-kubectl-host-pid
5 years ago
af7ad90477
Advise the use to mount /etc & /var read only for docker usage
5 years ago
ba03d8f64b
Document limitation of running with kubectl
...
Once the master node recommended check:
1.1.12 Ensure that the admission control plugin DenyEscalatingExec is set
has been followed, it is no longer possible to run kube-bench itself using kubectl.
5 years ago
5ca498cd50
Fix typo on README.md
5 years ago
bdbbe41b69
Also /var
6 years ago
ba9985047c
read config files from host /etc
...
I don't see how kube-bench can check the permissions on files unless it has access to them on the host, so I think we need to be mounting the /etc directory from the host
6 years ago
b3b3cb819a
Correct readme for 1.11 example
...
Signed-off-by: Johannes M. Scheuermann <joh.scheuer@gmail.com>
6 years ago
ded5aff482
update README
6 years ago
e5c05a97f7
updating README with 1.11 updates
6 years ago
8894b1dc4f
Update README.md
...
Specify `-t` to get colour in the Docker output.
Added a note about mounting kubectl or kubelet to get the version.
6 years ago
cc43fcbb7e
Add link to CIS kubernetes benchmark
6 years ago
6c7422a938
Migrate dependency management to dep
6 years ago
b4b3ebe99c
Add instruction for running kube-bench against a kubernetes cluster.
...
#218
6 years ago
609335510a
Remove kube-bench --help output.
...
It has grown stale and no longer reflects the supported options, and can be misleading (see #127 ).
6 years ago
b26b23e573
Script needs to actually install kube-bench & its config!
6 years ago
7460037528
Add link to releases page
6 years ago
1cff0c4da1
Clarify that only Linux is supported when installing from container
6 years ago
0714683371
Modify entrypoint to allow execution of kube-bench as default
6 years ago
cb4bec9120
logo instead of heading
6 years ago
f065893f52
Add logo to readme
6 years ago
95769cae83
Update README.md to reflect that the --installation option has been removed.
6 years ago
1e25e089d0
Minor format update to readme
6 years ago
216b1d497a
Fix glide install instructions
6 years ago
033ab5638c
Add glide dependencies
...
Also update build from source instructions
6 years ago
83e58b86db
Update README for Kubernetes 1.8 support
7 years ago
478e378752
Remove reference to specific benchmark version
...
We support multiple versions of the CIS benchmark
7 years ago
9a500229a4
Update README for auto-detection of executables and config files
7 years ago
4e17e3b3d5
Update README.md
7 years ago
34dd31970a
Update README about installation flag
7 years ago
44136fa080
Add image and commit badges to README
7 years ago
0c30f24b59
Travis build name got updated so the badges need updating too
7 years ago
432651e85f
Added test 1.4.11 ( #8 )
7 years ago
d3bbf2698e
Removed extra '\' sign ( #6 )
...
There was an extra '\' sign in the docker pull command
7 years ago
9a471ef1a4
Added screenshot
7 years ago
dcd416a521
Executable name changes
...
Updates to travis file, readme and help text
7 years ago
3bafeac47c
Update README.md
7 years ago
5e4baae23e
Update README.md
7 years ago
1d44458e93
Update README.md
7 years ago
c53a0ac6f4
Update README.md
7 years ago
55fd838191
No need to run install.sh.
...
Simply clone the project, compile the go app and run ./cis_kubernetes
7 years ago
26cc77ec1d
Get the tests working on deployments where file names may be different or not in path ( #1 )
...
* Replace the default help text
* Readme file, including the test config format documentation
* Typo
* Warn if config files / executables aren't found
* Ignore original name of executable (as per current README)
* Update tests to avoid failing on stat of a non-existant file
* Add a makefile for ease of build
7 years ago
7d091c5eba
Minor format change
7 years ago
Liz Rice