0ab09a85e8
Add pull requests section
...
Add pull requests section
Include instructions for kube-bench version
Other small wording changes
5 years ago
7affbc83d8
Add github issue creation instructions.
5 years ago
c76369fe2c
Add missing quote
5 years ago
7f2e9b5231
Merge branch 'master' into op-regex
5 years ago
7efa7b2c35
Add regex to list of compare ops
5 years ago
81f0d9c6e3
Merge branch 'master' into Config-doc
5 years ago
27df1f60ed
Clarification about worker nodes in managed k8s
...
Because we don’t want to put people off running kube-bench altogether in these environments
5 years ago
9d0e3491a0
[GH-191] explained that master nodes cannot be inspected in managed k8s
5 years ago
df3577519c
Document version-specific config files
...
Values in the version-specific files override the main file
5 years ago
a800ac6ccc
Merge branch 'master' into json-config
5 years ago
ceb44583dd
Tidy up a couple of things
5 years ago
f9d0f4acc1
Add OCP info into the README
5 years ago
a613f6f028
Document job for EKS
5 years ago
902a10f1c7
Just have one path for both json and yaml
5 years ago
c887794807
Merge branch 'master' into feature/json-config
5 years ago
b5f3299e92
Merge branch 'master' into document-output
5 years ago
df556c2f42
Add CIS & Kubernetes version mapping to README
5 years ago
488f5221ef
Document output states
...
Also describe how tests can be omitted by editing the YAML
5 years ago
abfc38d672
Update documentation after review
5 years ago
4d3144ca21
Support JSON and YAML configuration
...
Support new configuration options besides --flags:
- JSON file through `jsonpath`
- YAML file through `yamlpath`
These new options are fully backwards-compatible with the existing
tests.
Added a new profile, 1.11-json, that expects a JSON kubelet
configuration file and scores accordingly. This profile is compatible
with EKS.
5 years ago
5baf81a70a
Adds master node detection and a root command that automatically detect checks to run.
...
The root command will run node checks and if possible master checks.
I've also added some Makefile targets to improve local testing and improve the documentation.
5 years ago
79427e185e
Merge branch 'master' into patch-1
5 years ago
6b9ceae9d4
True for Windows too
5 years ago
2a9a02f25b
warn osx limitation
5 years ago
8021610e46
For #197 - create job YAML files that mount host volumes as needed
5 years ago
3a662b3ff6
Merge branch 'master' into doc-kubectl-host-pid
5 years ago
af7ad90477
Advise the use to mount /etc & /var read only for docker usage
5 years ago
ba03d8f64b
Document limitation of running with kubectl
...
Once the master node recommended check:
1.1.12 Ensure that the admission control plugin DenyEscalatingExec is set
has been followed, it is no longer possible to run kube-bench itself using kubectl.
5 years ago
5ca498cd50
Fix typo on README.md
5 years ago
bdbbe41b69
Also /var
6 years ago
ba9985047c
read config files from host /etc
...
I don't see how kube-bench can check the permissions on files unless it has access to them on the host, so I think we need to be mounting the /etc directory from the host
6 years ago
b3b3cb819a
Correct readme for 1.11 example
...
Signed-off-by: Johannes M. Scheuermann <joh.scheuer@gmail.com>
6 years ago
ded5aff482
update README
6 years ago
e5c05a97f7
updating README with 1.11 updates
6 years ago
8894b1dc4f
Update README.md
...
Specify `-t` to get colour in the Docker output.
Added a note about mounting kubectl or kubelet to get the version.
6 years ago
cc43fcbb7e
Add link to CIS kubernetes benchmark
6 years ago
6c7422a938
Migrate dependency management to dep
6 years ago
b4b3ebe99c
Add instruction for running kube-bench against a kubernetes cluster.
...
#218
6 years ago
609335510a
Remove kube-bench --help output.
...
It has grown stale and no longer reflects the supported options, and can be misleading (see #127 ).
6 years ago
b26b23e573
Script needs to actually install kube-bench & its config!
6 years ago
7460037528
Add link to releases page
6 years ago
1cff0c4da1
Clarify that only Linux is supported when installing from container
6 years ago
0714683371
Modify entrypoint to allow execution of kube-bench as default
6 years ago
cb4bec9120
logo instead of heading
6 years ago
f065893f52
Add logo to readme
6 years ago
95769cae83
Update README.md to reflect that the --installation option has been removed.
6 years ago
1e25e089d0
Minor format update to readme
6 years ago
216b1d497a
Fix glide install instructions
6 years ago
033ab5638c
Add glide dependencies
...
Also update build from source instructions
6 years ago
83e58b86db
Update README for Kubernetes 1.8 support
7 years ago
Liz Rice