12 Commits (3aa41db166140426bcd9d2da7a6a00b59234c402)

Author	SHA1	Message	Date
yoavrotems	89afda1f63	Add [Manual test] to remediation in all the manual tests (#435)	5 years ago
zilard	d8528a1ec8	issue #234: implement test 2.2.8 (#343) ... * implement test 2.2.8 * Nit: correct indentation The indentation looked a bit wonky due to spaces vs tabs; hopefully this corrects it	5 years ago
Liz Rice	dd8e7ec874	Merge branch 'master' into fix-208	5 years ago
Abubakr-Sadik Nii Nai Davis	a88b0703d8	Add kubeconfig variable substitution for kubelet and proxy. ... There are checks for the kubeconfig for both kubelet and proxy which the current kube-bench implementation does not check for properly. kube-bench checks the wrong files. This PR adds support for variable substitution for all the config file types are that should be checked in the CIS benchmarks. This PR also fixes a buggy in CIS 1.3.0 check 2.2.9, which checks for ownership of the kubelet config file /var/lib/kubelet/config.yaml but recommends changing ownership of kubelet kubeconfig file /etc/kubernetes/kubelet.conf as remediation.	5 years ago
Abubakr-Sadik Nii Nai Davis	3f98c1def2	Fix wrong reference to kubelet.config in node checks. ... This fix applies to only checks for kubernetes versions 1.8 and 1.11. See https://github.com/aquasecurity/kube-bench/pull/208.	5 years ago
Liz Rice	d712db47a2	Only find flags on the process we really want	5 years ago
Julien Garcia Gonzalez	2073e08363	update 2.2.4 rules	6 years ago
Julien Garcia Gonzalez	db096c9f51	Rule node 2.2.4 is not correct	6 years ago
Erwan Miran	182e9b5e01	Addition of missing audit field in 2.2.6 node item	6 years ago
Abubakr-Sadik Nii Nai Davis	04f044e3b9	Add support for merging general and kubernetes version specific config files. ... This change unifies all config files, podspecs and unitfiles under a single component configuration key; `config`.	7 years ago
Abubakr-Sadik Nii Nai Davis	82e325f96e	Update 1.8 node definition.	7 years ago
Abubakr-Sadik Nii Nai Davis	7663dc87ee	Copy 1.7 benchmark as 1.8.	7 years ago