Yoav Hizkiahou
082e9cf7e9
Bugfix: Logging warning instead of printing
...
Made all the warnings to be logged and not printed, so when using the json flag the output will be only in json format.
fix #217
2019-02-19 14:39:55 +02:00
Liz Rice
ba437d500a
Merge pull request #206 from westonsteimel/no_runningversion_if_version_set
...
Only get runningVersion if --version has not been provided
2019-01-24 12:00:59 +01:00
Weston Steimel
42f4152058
Only get runningVersion if --version has not been provided
...
Signed-off-by: Weston Steimel <weston.steimel@gmail.com>
2019-01-24 00:34:09 +00:00
Liz Rice
8dabb7dc37
Merge pull request #201 from aquasecurity/yam-comment
...
Comment why we mount /usr/bin
2019-01-22 09:49:25 +01:00
Liz Rice
f2062e81a1
Comment why /usr/bin is mounted
2019-01-17 11:36:25 +00:00
Liz Rice
528bcfbffe
Update job-node.yaml
2019-01-17 11:34:26 +00:00
Liz Rice
3422b9102f
Add comment for why /usr/bin is mounted
2019-01-17 11:33:35 +00:00
Liz Rice
86b126ad2b
Create NOTICE ( #199 )
...
* Create NOTICE
* Update NOTICE
2019-01-16 10:53:07 +02:00
Liz Rice
827945f7fb
Merge pull request #200 from spuder/patch-1
...
warn osx limitation
2019-01-15 11:11:57 +00:00
Liz Rice
79427e185e
Merge branch 'master' into patch-1
2019-01-15 11:05:27 +00:00
Liz Rice
6b9ceae9d4
True for Windows too
2019-01-15 11:05:04 +00:00
Liz Rice
fbd6eb8ff5
Merge pull request #198 from aquasecurity/mount-volumes
...
For #197 - create job YAML files that mount host volumes as needed
2019-01-15 11:03:06 +00:00
Spencer Owen
2a9a02f25b
warn osx limitation
2019-01-14 10:41:19 -07:00
Liz Rice
8021610e46
For #197 - create job YAML files that mount host volumes as needed
2019-01-11 18:44:13 +00:00
Liz Rice
2eef3e8ad2
Merge pull request #193 from maxbischoff/patch-1
...
Changed 1.1.14 to not fail when flag is not set
2019-01-09 10:21:27 +00:00
Maximilian Bischoff
791fbba9e7
Changed 1.1.14 to not fail when flag is not set
...
Added another test item that checks whether --disable-admission-plugins is not set and an "or" bin_op.
This causes check 1.1.14 to be successful when the flag is not set, while still failing when the flag is set and includes the value NamespaceLifecycle
2019-01-08 13:58:41 +01:00
Liz Rice
f6cab11357
Merge pull request #187 from martinmosegaard/doc-kubectl-host-pid
...
Document limitation of running with kubectl
2019-01-02 11:05:32 +00:00
Liz Rice
9f2899027e
Merge branch 'master' into doc-kubectl-host-pid
2019-01-02 10:59:19 +00:00
Liz Rice
313fe038f6
Merge pull request #188 from martinmosegaard/rm-space-tls-cipher
...
Remove spaces in remediation command for tls-cipher-suites
2019-01-02 10:59:07 +00:00
Liz Rice
2d721ed4ad
Merge branch 'master' into rm-space-tls-cipher
2019-01-02 10:53:29 +00:00
Liz Rice
799b928054
Merge pull request #189 from Congelli501/patch-1
...
Typo: trailing whitespace for rule text
2019-01-02 10:53:16 +00:00
Liz Rice
3a662b3ff6
Merge branch 'master' into doc-kubectl-host-pid
2019-01-02 10:53:04 +00:00
Liz Rice
f902b30110
Merge branch 'master' into rm-space-tls-cipher
2019-01-02 10:31:34 +00:00
Liz Rice
b52a88214f
Merge branch 'master' into patch-1
2019-01-02 10:30:33 +00:00
Liz Rice
bfdd921f3d
Merge pull request #190 from Congelli501/patch-2
...
Advise the use to mount /etc & /var read only for docker usage
2019-01-02 10:29:58 +00:00
Colin GILLE
af7ad90477
Advise the use to mount /etc & /var read only for docker usage
2018-12-31 16:39:31 +01:00
Colin GILLE
ffe7ffb3d3
Type: trailing whitespace for rule text
2018-12-31 16:36:15 +01:00
Martin Mosegaard Amdisen
fd120d0adf
Remove spaces in remediation command for tls-cipher-suites
...
Makes it easier to copy-paste the remediation. Matches the other occurences
of tls-cipher-suites in the configuration.
2018-12-27 14:48:21 +01:00
Martin Mosegaard Amdisen
ba03d8f64b
Document limitation of running with kubectl
...
Once the master node recommended check:
1.1.12 Ensure that the admission control plugin DenyEscalatingExec is set
has been followed, it is no longer possible to run kube-bench itself using kubectl.
2018-12-27 13:10:00 +01:00
Liz Rice
21f7902288
Merge pull request #183 from s1lv3r40/master
...
Fixing Node Check - 2.1.15 typos
2018-12-21 11:31:43 +00:00
Liz Rice
26e28b8897
Merge branch 'master' into master
2018-12-21 11:26:53 +00:00
Liz Rice
ae1812b4db
Merge pull request #185 from maxbischoff/patch-1
...
Added missing "=" to master.yaml
2018-12-21 11:26:40 +00:00
Liz Rice
1534a4aea8
Merge branch 'master' into patch-1
2018-12-21 11:20:13 +00:00
Liz Rice
28a57ff1a3
Merge branch 'master' into master
2018-12-21 11:18:26 +00:00
Liz Rice
41fe066039
Merge pull request #186 from seslattery/seslattery-patch-1
...
Fix typo on README.md
2018-12-21 11:17:31 +00:00
Sean Slattery
5ca498cd50
Fix typo on README.md
2018-12-20 11:19:44 -08:00
Maximilian Bischoff
e81b785bf8
Added missing "=" to master.yaml
...
In the remediation of 1.1.11 the flag --enable-admission-plugins was missing a =
2018-12-19 18:20:23 +01:00
Vladimir Dimov
645d23e1ec
fixing typos 2.1.15
2018-11-28 13:14:49 +02:00
Liz Rice
52d6ac717d
Merge pull request #181 from aquasecurity/config-file-location-mount
...
read config files from host /etc
2018-11-20 19:49:37 +00:00
Liz Rice
bdbbe41b69
Also /var
2018-11-20 13:22:36 +00:00
Liz Rice
ba9985047c
read config files from host /etc
...
I don't see how kube-bench can check the permissions on files unless it has access to them on the host, so I think we need to be mounting the /etc directory from the host
2018-11-20 10:18:06 +00:00
Liz Rice
5fe702edbe
Merge pull request #175 from aquasecurity/fix-2.1.8
...
Fix node check 2.1.8
2018-11-08 12:22:17 +00:00
Liz Rice
6e80b6477a
Merge branch 'master' into fix-2.1.8
2018-11-08 11:41:54 +00:00
Liz Rice
e1f5bb1ace
Merge pull request #173 from aquasecurity/fix-1.1.37
...
Fix check 1.1.37.
2018-11-08 11:40:06 +00:00
Liz Rice
6d8788071f
Merge branch 'master' into fix-2.1.8
2018-11-08 11:38:34 +00:00
Liz Rice
f42243e9b5
Merge branch 'master' into fix-1.1.37
2018-11-08 11:35:58 +00:00
Liz Rice
d004acdbba
Merge pull request #174 from johscheuer/correct-readme
...
Correct readme for 1.11 example
2018-11-08 11:33:50 +00:00
Abubakr-Sadik Nii Nai Davis
0a5358665e
By default --make-iptables-util-chain is true, so PASS if this flag is not set.
2018-11-07 23:57:38 +00:00
Abubakr-Sadik Nii Nai Davis
4f40a11e84
Change binary op from and to or.
2018-11-07 23:54:41 +00:00
Johannes M. Scheuermann
b3b3cb819a
Correct readme for 1.11 example
...
Signed-off-by: Johannes M. Scheuermann <joh.scheuer@gmail.com>
2018-11-07 21:51:52 +01:00
