14 Commits (9246be924dde4c667c7c3b6d05ebbc0a813da254)

Author	SHA1	Message	Date
Liz Rice	9b3628e76a	Update openshift executable config for #236	5 years ago
Abubakr-Sadik Nii Nai Davis	a88b0703d8	Add kubeconfig variable substitution for kubelet and proxy. ... There are checks for the kubeconfig for both kubelet and proxy which the current kube-bench implementation does not check for properly. kube-bench checks the wrong files. This PR adds support for variable substitution for all the config file types are that should be checked in the CIS benchmarks. This PR also fixes a buggy in CIS 1.3.0 check 2.2.9, which checks for ownership of the kubelet config file /var/lib/kubelet/config.yaml but recommends changing ownership of kubelet kubeconfig file /etc/kubernetes/kubelet.conf as remediation.	5 years ago
Abubakr-Sadik Nii Nai Davis	3f98c1def2	Fix wrong reference to kubelet.config in node checks. ... This fix applies to only checks for kubernetes versions 1.8 and 1.11. See https://github.com/aquasecurity/kube-bench/pull/208.	5 years ago
Abubakr-Sadik Nii Nai Davis	04f044e3b9	Add support for merging general and kubernetes version specific config files. ... This change unifies all config files, podspecs and unitfiles under a single component configuration key; `config`.	7 years ago
Abubakr-Sadik Nii Nai Davis	e227934c88	Add function to get unit files for kubernetes components.	7 years ago
Abubakr-Sadik Nii Nai Davis	6ce0c5bf60	Add function to get pod specs for kubernetes components.	7 years ago
Liz Rice	a6036bcfcf	Corrections to config file substitutions. Use “kubernetes” as a fake component name so we can more easily substitute “kubernetesconf”	7 years ago
Liz Rice	a3197f8efe	Reorder YAML to make a bit more sense. Allow for optional components, and a config file that we don’t think exists.	7 years ago
Liz Rice	e4e41683c4	Update the config file	7 years ago
Liz Rice	cf62def9fd	Better config file locations	7 years ago
Abubakr-Sadik Nii Nai Davis	f88de572f6	Improve error handling.	7 years ago
Abubakr-Sadik Nii Nai Davis	609c4ff01c	Move kubernetes binaries and config paths to kube-bench config.	7 years ago
Amir Jerbi	55fd838191	No need to run install.sh. ... Simply clone the project, compile the go app and run ./cis_kubernetes	7 years ago
Amir Jerbi	154a140f74	Initial commit	7 years ago