334 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Liz Rice	bdbbe41b69	Also /var	2018-11-20 13:22:36 +00:00
Liz Rice	ba9985047c	read config files from host /etc ... I don't see how kube-bench can check the permissions on files unless it has access to them on the host, so I think we need to be mounting the /etc directory from the host	2018-11-20 10:18:06 +00:00
Liz Rice	5fe702edbe	Merge pull request #175 from aquasecurity/fix-2.1.8 ... Fix node check 2.1.8	2018-11-08 12:22:17 +00:00
Liz Rice	6e80b6477a	Merge branch 'master' into fix-2.1.8	2018-11-08 11:41:54 +00:00
Liz Rice	e1f5bb1ace	Merge pull request #173 from aquasecurity/fix-1.1.37 ... Fix check 1.1.37.	2018-11-08 11:40:06 +00:00
Liz Rice	6d8788071f	Merge branch 'master' into fix-2.1.8	2018-11-08 11:38:34 +00:00
Liz Rice	f42243e9b5	Merge branch 'master' into fix-1.1.37	2018-11-08 11:35:58 +00:00
Liz Rice	d004acdbba	Merge pull request #174 from johscheuer/correct-readme ... Correct readme for 1.11 example	2018-11-08 11:33:50 +00:00
Abubakr-Sadik Nii Nai Davis	0a5358665e	By default --make-iptables-util-chain is true, so PASS if this flag is not set.	2018-11-07 23:57:38 +00:00
Abubakr-Sadik Nii Nai Davis	4f40a11e84	Change binary op from and to or.	2018-11-07 23:54:41 +00:00
Johannes M. Scheuermann	b3b3cb819a	Correct readme for 1.11 example ... Signed-off-by: Johannes M. Scheuermann <joh.scheuer@gmail.com>	2018-11-07 21:51:52 +01:00
Abubakr-Sadik Nii Nai Davis	c0f56e966a	Fix check 1.1.37.	2018-11-06 14:35:45 +00:00
Liz Rice	ed7f6cf3fc	Merge pull request #171 from nickperry/master ... Fixes https://github.com/aquasecurity/kube-bench/issues/170	2018-11-01 09:57:14 +00:00
Nick Perry	e083c8f0a3	Fixes https://github.com/aquasecurity/kube-bench/issues/170 ... Correcting the logic of 1.1.14 for Kubernetes 1.11.	2018-10-30 23:40:41 +00:00
Liz Rice	77481e8739	Merge pull request #169 from mikekim/fix-1.3.7 ... Fixing 1.3.7 on 1.11 master.	2018-10-29 12:12:39 +00:00
Liz Rice	48489637c5	Merge branch 'master' into fix-1.3.7	2018-10-29 12:08:22 +00:00
Liz Rice	15537cb42b	Merge pull request #168 from mikekim/fix-dollar-in-paths ... Fixing checks 2.2.9 and 2.2.10 on 1.11 nodes.	2018-10-27 09:31:55 +01:00
Michal Jankowski	9988503223	Fixing 1.3.7 on 1.11 master. ... With multiple test items operator defaults to "and". In case of 1.3.7 the tests check whether --address flag is either set to 127.0.0.1 or not set at all. Those conditions cannot be met at the same time.	2018-10-25 15:32:41 -07:00
Michal Jankowski	5f254de415	Fixing checks 2.2.9 and 2.2.10 on 1.11 nodes. ... Path to kubelet configuration was accidentally prefixed with a dollar symbol (probably as a result of copying some other test that used variable name). After removing the dollar sign from paths both checks pass on conforming deployment.	2018-10-24 17:06:21 -07:00
Liz Rice	64f4f638e9	Merge pull request #167 from aquasecurity/fix-issue-with-kubelet-config-and-unitfile-checks ... Fix issue with kubelet config and unitfile checks	2018-10-23 14:45:19 +01:00
Abubakr-Sadik Nii Nai Davis	97623aea05	Update kubernetes node benchmark to check kubelet systemd unitfile. ... Also clean up the config file for 1.11 a bit.	2018-10-23 02:30:08 +00:00
Abubakr-Sadik Nii Nai Davis	ed21839464	Add getServiceFiles function. ... The CIS benchmark check for node checks 2 config files for kubelet: - kubelet config file (kubelet.conf) - kubelet systemd unitfile (10-kubeadm.conf) The getServiceFiles function gets candidates for kubelet systemd unitfile and returns valid untifiles.	2018-10-23 02:26:38 +00:00
Liz Rice	277ec9c823	Merge pull request #163 from noqcks/master ... Update tests for Kubernetes 1.11 - thank you @noqcks!	2018-10-13 22:09:24 +01:00
Abubakr-Sadik Nii Nai Davis	b1369832bc	A few corrections to node tests. (#2) ... * Add a few corrections. * Add a few corrections to node test file.	2018-10-13 15:48:50 -04:00
Abubakr-Sadik Nii Nai Davis	934b4aef96	Add a few corrections. (#1)	2018-10-12 10:22:08 -04:00
noqcks	e85de9e8af	fix simple errors	2018-10-09 19:16:08 -04:00
noqcks	ded5aff482	update README	2018-10-09 18:58:30 -04:00
noqcks	b3a115963b	adding 1.11 config and node checks	2018-10-09 18:57:37 -04:00
noqcks	e5c05a97f7	updating README with 1.11 updates	2018-10-09 18:56:48 -04:00
noqcks	ba5ec8d4be	adding 1.11 master configuration	2018-10-09 18:34:52 -04:00
Liz Rice	d56afd4104	Merge pull request #159 from lukebond/master ... Update README.md	2018-09-04 08:37:04 +01:00
Luke Bond	8894b1dc4f	Update README.md ... Specify `-t` to get colour in the Docker output. Added a note about mounting kubectl or kubelet to get the version.	2018-09-03 23:05:48 +01:00
Liz Rice	ff59938f94	Merge pull request #155 from bvwells/cis-benchmark-link ... Add link to CIS kubernetes benchmark	2018-08-20 09:14:37 +01:00
bvwells	cc43fcbb7e	Add link to CIS kubernetes benchmark	2018-08-10 20:55:02 +01:00
Liz Rice	2f4f55a363	Merge pull request #149 from aquasecurity/itai_cis_results ... Support actual result in json output.	2018-07-31 18:18:51 +01:00
Itai Ben-Natan	e9076233dd	Support actual result in json output. ... This commit adds the actual value of the result of the value which was returned by the test.	2018-07-30 14:19:18 +00:00
Liz Rice	b1e41d345f	Merge pull request #147 from aquasecurity/version-fix ... Shouldn't need kubelet or kubectl if version specified	2018-07-28 14:53:56 +01:00
Liz Rice	ccc2b6c9ae	Shouldn't need kubelet or kubectl if version specified	2018-07-26 12:03:09 +01:00
Liz Rice	668a9e10ce	Merge pull request #141 from aquasecurity/version-default ... Default version	2018-07-02 15:36:31 +01:00
Liz Rice	8c3bb62dd4	Merge pull request #140 from aquasecurity/manifest-extension ... Inlcude .manifest extension config files for kops & kubespray	2018-07-02 15:34:49 +01:00
Liz Rice	9d0141871a	Use new utility function for finding correct config files. ... Improve order of message output Remove unnecessary local variable	2018-06-29 12:20:29 +01:00
Liz Rice	344d2bfd24	Utility for getting the right config file for the Kubernetes version	2018-06-29 12:19:34 +01:00
Liz Rice	ecd14ed682	File substitutions should be a detailed log	2018-06-29 12:19:00 +01:00
Liz Rice	223ac14642	Don't override version specified on command line	2018-06-29 10:35:44 +01:00
Liz Rice	c44e0db97b	Inlcude .manifest extension config files for kops & kubespray	2018-06-29 10:24:09 +01:00
Liz Rice	0bc004468b	Include .manifest extensions as an option for config files (as used by kops and kubespreay)	2018-06-29 10:23:06 +01:00
Liz Rice	83704a7d89	Merge pull request #134 from hutr/master ... fix grep string for check 1.4.11 and 1.4.12	2018-06-18 08:44:13 -07:00
Liz Rice	024b7ed396	Merge branch 'master' into master	2018-06-18 08:30:24 -07:00
Liz Rice	c5e04677cf	Merge pull request #138 from jgsqware/patch-1 ... Rule node 2.2.4 is not correct	2018-06-18 08:28:38 -07:00
Julien Garcia Gonzalez	2073e08363	update 2.2.4 rules	2018-06-18 13:44:25 +02:00