911e9051dc
Merge remote-tracking branch 'origin/master' into ocp-configs
5 years ago
e899e941f7
Add OCP 3.10 benchmarks.
5 years ago
42ed8628de
Only get runningVersion if --version has not been provided
...
Signed-off-by: Weston Steimel <weston.steimel@gmail.com>
5 years ago
49f745af8e
Support new check type - skip:
...
If a check is marked with type "skip", it will be marked as Info.
Support scored property:
If a check is not scored and is not marked with type skip, it will be marked as Warn.
5 years ago
42f4152058
Only get runningVersion if --version has not been provided
...
Signed-off-by: Weston Steimel <weston.steimel@gmail.com>
5 years ago
ed21839464
Add getServiceFiles function.
...
The CIS benchmark check for node checks 2 config files for kubelet:
- kubelet config file (kubelet.conf)
- kubelet systemd unitfile (10-kubeadm.conf)
The getServiceFiles function gets candidates for kubelet systemd
unitfile and returns valid untifiles.
6 years ago
cc43fcbb7e
Add link to CIS kubernetes benchmark
6 years ago
ccc2b6c9ae
Shouldn't need kubelet or kubectl if version specified
6 years ago
9d0141871a
Use new utility function for finding correct config files.
...
Improve order of message output
Remove unnecessary local variable
6 years ago
344d2bfd24
Utility for getting the right config file for the Kubernetes version
6 years ago
ecd14ed682
File substitutions should be a detailed log
6 years ago
223ac14642
Don't override version specified on command line
6 years ago
6d237607fb
Fix typo in help text.
6 years ago
5da707b8d6
Remove CIS benchmark version in tool title.
...
it has grown stale and is dependent on k8s version we are checking.
6 years ago
39d94df81b
Add tip about the `--version` flag to error output
...
If people are trying to use the Docker image to check their cluster, there's a
big likelyhood of them hitting the error message saying that either `kubectl`
or `kubelet` need to be found in order for `kube-bench` to be able to determine
the Kubernetes version in use.
This adds a tip that the version can be specified manually with the `--version`
flag which is a lot easier than having to make a new Docker image with the
right version of `kubelet`/`kubectl` in order for `kube-bench` to work.
6 years ago
0b4872104d
Merge branch 'master' into feature/issue-107
6 years ago
9469b1c124
Allow kubernetes version and config directory to be specified ( resolves #107 )
6 years ago
ade064006e
Add extra output manipulation flags, --noremediations, --nosummary and
...
--noresults.
These flags disable printing sections of the final output of kube-bench.
6 years ago
728cb0765f
Use 1.8 tests for k8s 1.9 and 1.10
6 years ago
f091c8adea
Remove the old lines of fmt.Sprintf in cmd/common.go
6 years ago
d6c16f7563
Try to use kubelet when kubectl is unavailable
6 years ago
c86d0ff81b
Replace fmt.Sprintf by filepath.Join
6 years ago
58b6358a02
Merge branch 'master' into u/jaxxstorm/golint
6 years ago
94a1f3c41f
Lint all code for golint tests
6 years ago
64aaef7997
Fixed expected return for getKubeVersion.
7 years ago
53eb720952
Merge branch 'master' into unnecessary-warning
7 years ago
04f044e3b9
Add support for merging general and kubernetes version specific config files.
...
This change unifies all config files, podspecs and unitfiles under
a single component configuration key; `config`.
7 years ago
97485419e2
Can't run kubectl on Travis so I don't know how this test ever worked
7 years ago
730871f330
Fix kubeVersion regex tests
7 years ago
c93c94b3f6
Fix version check regexp.
7 years ago
c60c459bc4
Fix bug causing kubectl version to always return default version.
7 years ago
42a1068964
Add default version if version check fails.
7 years ago
f90dd925b8
Exit kube-bench if we can't get valid kubernetes server version and
...
improve error messages.
7 years ago
31b5910a7f
Remove unnecessary warnings about missing config files.
7 years ago
909e6cc874
created database.go file and moved DB function into it
7 years ago
1faeb55b67
Merge branch 'master' into master
7 years ago
d79a2a5478
added support for saving scan results to pgsql
7 years ago
3dcc38d5c8
Fix issue with util test.
7 years ago
592dc81974
Remove unused variables.
7 years ago
cec1d9d6b3
Combine config reading functions into single function.
7 years ago
e227934c88
Add function to get unit files for kubernetes components.
7 years ago
6ce0c5bf60
Add function to get pod specs for kubernetes components.
7 years ago
018ad12a64
Log benchmark definition file at verbosity level 1.
7 years ago
73a37a0c16
Delete tests for verifyKubeVersion and support functions.
7 years ago
88a003090f
Delete verifyKubeVersion support functions.
7 years ago
a95d083049
Remove call to verifyKubeVersion.
...
This functionality is fulfilled by getKubeVersion.
7 years ago
d9e1eee2cd
Merge remote-tracking branch 'origin/master' into support for multiple
...
Kubernetes versions.
7 years ago
56fa20103a
Add function to retrieve Kubernetes server version.
...
The server version is used to load the correct benchmark check
to run against the Kubernetes cluster.
7 years ago
c4be4a1240
Remove installation flag and some other unused variables
7 years ago
de12829923
Correct test to cope with multi-line ps output
7 years ago
Abubakr-Sadik Nii Nai Davis