kube-bench

Commit Graph

Author	SHA1	Message	Date
Christian Zunker	9446ffb30d	Add a total summary and always show all tests. (#759 ) Whether the total summary is shown can be specified with an option. Fixes #528 Signed-off-by: Christian Zunker <christian.zunker@codecentric.cloud>	3 years ago
Huang Huang	28192bb7ab	Pass RotateKubeletServerCertificate related checks if it's not found (#767 )	4 years ago
bjrara	83b80a5816	automate check 3.2.1 Ensure that a minimal audit policy is created (#742 ) Co-authored-by: mengyzhou <mengyzhou@ebay.com>	4 years ago
Tom Kelley	a7aa21f32c	Improve Proxykubeconfig tests (#708 ) * Changes for 1.5 * Update cis-1.3 through 1.6 to also work with configmaps. * Switch on if proxykubeconfig is set, instead of setting a variable in the script. * permissons -> proxykubeconfig for 2.2.5/4.1.3 to keep these tests locked with 2.2.6/4.1.4 * Updating test output? Maybe? * Copy integration test output files into docker image? * Make entrypoint move integration folder to host, print 1.5 node info. * Change the order of tests in travis to load files before testing. * Return tests to place Those tests comes first since there is more likely to fail with them and then the test will fail "faster" which will save time * Remove copy integration When running in a container we don't need to test, only when build and running in Travis to make sure everything is working fine. * Add $ mark before proxykubeconfig If not having $ before the parameter then it won't get substituted * Add $ mark before proxykubeconfig If not having $ before the parameter then it won't get substituted * Remove test relate lines We don't test while running, only integration testing when building and unit testing * Add spaces * Change 4.1.3 4.1.4 Those tests now should pass. * Change tests 4.1.3 and 4.1.4 Those tests now should PASS * Update job.data with more accurate counts. Thanks to @yoavrotems for getting the project this far! * Thanks for linting, yamllint! Co-authored-by: Yoav Rotem <yoavrotems97@gmail.com>	4 years ago
Huang Huang	2d548597ae	Support CIS v1.5.1 (#673 )	4 years ago
Liz Rice	07f3c40dc7	Better handling of parameters and config audits (#674 ) * read-only-port defaults are correct * Tests that should catch good read-only-port * Rework checks & tests * Linting on issue template YAML * More explicit test for 4.2.4	4 years ago
Huang Huang	6684979741	Add tests for 1.1.19、1.1.20 and 1.1.21 of cis-1.5 (#641 ) * Add tests for 1.1.19、1.1.20 and 1.1.21 of cis-1.5 * Avoid division by 0 * Use bitmask instead of lte * Change to use multiple values via `use_multiple_values: true` * Use find in 1.1.20 and 1.1.21	4 years ago
Huang Huang	66692951c8	4.1.7 of cis-1.5 should not be marked as manual (#640 ) * 4.1.7 of cis-1.5 should not be marked as manual * Making the test posix compliant like #643	4 years ago
Huang Huang	52ebfa5b5a	Fix invalid JSON output (#629 ) * Fix invalid JSON output Fixes #622 * Apply suggestions from code review Co-authored-by: Liz Rice <liz@lizrice.com> * Add tests Co-authored-by: Liz Rice <liz@lizrice.com>	4 years ago
Huang Huang	35cf28c140	Add integration tests for cis 1.3 and cis 1.5 (#609 ) * Remove unnecessary whitespaces * Fix a typo * Add integration tests for cis 1.3 and cis 1.5 * Change the timeout of integration tests from 600s to 1200s * Avoid repeated codes	4 years ago

10 Commits (9446ffb30d6c58a3d41b999a8dceb50462f55171)