Abubakr-Sadik Nii Nai Davis
ade064006e
Add extra output manipulation flags, --noremediations, --nosummary and
...
--noresults.
These flags disable printing sections of the final output of kube-bench.
7 years ago
Liz Rice
728cb0765f
Use 1.8 tests for k8s 1.9 and 1.10
7 years ago
Philippe ALEXANDRE
f091c8adea
Remove the old lines of fmt.Sprintf in cmd/common.go
7 years ago
Philippe ALEXANDRE
d6c16f7563
Try to use kubelet when kubectl is unavailable
7 years ago
Philippe ALEXANDRE
c86d0ff81b
Replace fmt.Sprintf by filepath.Join
7 years ago
Liz Rice
58b6358a02
Merge branch 'master' into u/jaxxstorm/golint
7 years ago
Lee Briggs
94a1f3c41f
Lint all code for golint tests
7 years ago
Abubakr-Sadik Nii Nai Davis
64aaef7997
Fixed expected return for getKubeVersion.
7 years ago
Abubakr-Sadik Nii Nai Davis
53eb720952
Merge branch 'master' into unnecessary-warning
7 years ago
Abubakr-Sadik Nii Nai Davis
04f044e3b9
Add support for merging general and kubernetes version specific config files.
...
This change unifies all config files, podspecs and unitfiles under
a single component configuration key; `config`.
7 years ago
Liz Rice
97485419e2
Can't run kubectl on Travis so I don't know how this test ever worked
7 years ago
Liz Rice
730871f330
Fix kubeVersion regex tests
7 years ago
Abubakr-Sadik Nii Nai Davis
c93c94b3f6
Fix version check regexp.
7 years ago
Abubakr-Sadik Nii Nai Davis
c60c459bc4
Fix bug causing kubectl version to always return default version.
7 years ago
Abubakr-Sadik Nii Nai Davis
42a1068964
Add default version if version check fails.
7 years ago
Abubakr-Sadik Nii Nai Davis
f90dd925b8
Exit kube-bench if we can't get valid kubernetes server version and
...
improve error messages.
7 years ago
Abubakr-Sadik Nii Nai Davis
31b5910a7f
Remove unnecessary warnings about missing config files.
7 years ago
Steven Logue
909e6cc874
created database.go file and moved DB function into it
7 years ago
Liz Rice
1faeb55b67
Merge branch 'master' into master
7 years ago
Steven Logue
d79a2a5478
added support for saving scan results to pgsql
7 years ago
Abubakr-Sadik Nii Nai Davis
3dcc38d5c8
Fix issue with util test.
7 years ago
Abubakr-Sadik Nii Nai Davis
592dc81974
Remove unused variables.
7 years ago
Abubakr-Sadik Nii Nai Davis
cec1d9d6b3
Combine config reading functions into single function.
7 years ago
Abubakr-Sadik Nii Nai Davis
e227934c88
Add function to get unit files for kubernetes components.
7 years ago
Abubakr-Sadik Nii Nai Davis
6ce0c5bf60
Add function to get pod specs for kubernetes components.
7 years ago
Abubakr-Sadik Nii Nai Davis
018ad12a64
Log benchmark definition file at verbosity level 1.
7 years ago
Abubakr-Sadik Nii Nai Davis
73a37a0c16
Delete tests for verifyKubeVersion and support functions.
7 years ago
Abubakr-Sadik Nii Nai Davis
88a003090f
Delete verifyKubeVersion support functions.
7 years ago
Abubakr-Sadik Nii Nai Davis
a95d083049
Remove call to verifyKubeVersion.
...
This functionality is fulfilled by getKubeVersion.
7 years ago
Abubakr-Sadik Nii Nai Davis
d9e1eee2cd
Merge remote-tracking branch 'origin/master' into support for multiple
...
Kubernetes versions.
7 years ago
Abubakr-Sadik Nii Nai Davis
56fa20103a
Add function to retrieve Kubernetes server version.
...
The server version is used to load the correct benchmark check
to run against the Kubernetes cluster.
7 years ago
Liz Rice
c4be4a1240
Remove installation flag and some other unused variables
7 years ago
Liz Rice
de12829923
Correct test to cope with multi-line ps output
7 years ago
Liz Rice
e4a89123e0
Move message about which config file we’re using into a log at the start
7 years ago
Liz Rice
8380ad1ef3
Better detection of running executables
7 years ago
Liz Rice
d637d8714a
Fix and add tests
7 years ago
Liz Rice
a3197f8efe
Reorder YAML to make a bit more sense. Allow for optional components, and a config file that we don’t think exists.
7 years ago
Liz Rice
e4b905e360
Log when there’s no substitution
7 years ago
Liz Rice
f5550fd8bd
Node type is now verified by looking for running binaries from a set of options
7 years ago
Liz Rice
6a5a62b278
Autodetect the binaries and config files from a set of options
7 years ago
Liz Rice
f5cef922cc
Functions and tests for finding binaries and config files
7 years ago
Liz Rice
7600dd9dd6
Make the ps / fakeps function global so we don’t have to pass it around so much
7 years ago
Liz Rice
0bc00e0036
Slightly more robust looking for running executables
7 years ago
Liz Rice
9114e139cf
Function to find which of a set of executables is running
7 years ago
Liz Rice
6b9f117f87
Allow for multiple words in executable names
7 years ago
Liz Rice
34f8b8e980
Simplify verifying binaries and config files
7 years ago
Liz Rice
86d49b1b1a
We don’t care whether the binaries are in our path or not, just whether they are running
7 years ago
Liz Rice
96c469669c
Use kubectl to check the kubernetes version
7 years ago
Liz Rice
2b4047a3c1
Merge pull request #28 from ttousai/errorhandling
...
Improve error handling.
7 years ago
Abubakr-Sadik Nii Nai Davis
7bb66dd2da
Rename warning printing functions.
...
printlnWarn: prints warning with a newline.
sprintWarn: returns an optionally contextualized warning string.
7 years ago
Abubakr-Sadik Nii Nai Davis
82c92e0078
Change function name to be clearer about the fact it returns a string.
7 years ago
Abubakr-Sadik Nii Nai Davis
f88de572f6
Improve error handling.
7 years ago
Abubakr-Sadik Nii Nai Davis
e08e069174
Update controls to CIS Kubernetes Benchmark v1.1.0
7 years ago
Abubakr-Sadik Nii Nai Davis
f589fd58e1
Add few modifications.
7 years ago
Abubakr-Sadik Nii Nai Davis
3d395994b0
Change environment variable prefix.
7 years ago
Abubakr-Sadik Nii Nai Davis
609c4ff01c
Move kubernetes binaries and config paths to kube-bench config.
7 years ago
Abubakr-Sadik Nii Nai Davis
2ee99eca64
Add support for various installation modes, hyperkube, kubeadm and kops.
...
Issue #17 .
7 years ago
Abubakr-Sadik Nii Nai Davis
bd53529387
Fix issue #16 about supporting verbosity.
7 years ago
Abubakr-Sadik Nii Nai Davis
06466d6573
Fix issue with kubernetes version check, where the master binary is
...
used for all modes including nodes and federated.
7 years ago
Abubakr-Sadik Nii Nai Davis
dbbafd54a5
Do not exit on command exit, print error message to stderr and continue.
7 years ago
Abubakr-Sadik Nii Nai Davis
6ee9bedfb8
Print verification warnings at only one point.
7 years ago
Abubakr-Sadik Nii Nai Davis
2119d119b0
Restore warning messages and dont quit on verification error.
7 years ago
Abubakr-Sadik Nii Nai Davis
d0d9900b29
Resolve issue #7 wait: error running audit command exit status 1.
...
This is caused by a command in the audit pipeline (for example
ps -ef | grep kube-apiserver) failing. The causes of this failure
in my testing is usually a missing config file.
Extensive refactor and correction in verification code to check for
config files and binaries.
Replace joncalhoun/pipes with implementation using exec.Cmds so errors
are visible and can be handled when audit pipeline commands fail.
Change some audit commands
from: ps -ef | grep <cmd> | grep -v
to: ps -C <something> -o comm,args --no-headers
which is simpler to work with.
7 years ago
Liz Rice
b4237ccb73
Better error handling when reading YAML files
7 years ago
Liz Rice
07750ea43a
Don't output message about config file if output format is JSON
7 years ago
Liz Rice
6340ee44c5
Don’t output warnings as text if we’re generating JSON output. Add error handling in a few missing cases. Some comment tidying.
7 years ago
Liz Rice
f6509b804e
Typo
7 years ago
Liz Rice
b36832e40c
Correct block-copy error in flanneld config directory
7 years ago
Liz Rice
1be52fb304
Add missing error output if JSON output can't be emitted
7 years ago
Liz Rice
0d6d3a03ef
Allow config file to be specified on the command line
7 years ago
Liz Rice
96364e3f29
Error if the config file can’t be found
7 years ago
Liz Rice
c07a8e2c81
Minor language improvement
7 years ago
jerbia
432651e85f
Added test 1.4.11 ( #8 )
7 years ago
Liz Rice
c3d67e0fee
Use colorPrint for config file info too
7 years ago
Liz Rice
b7a92799b9
Blue for info messages
7 years ago
Liz Rice
800c18ccf3
colorPrint for the output
...
Use the same format output for warnings even if they aren’t related to
a specific test ID
7 years ago
Liz Rice
dcd416a521
Executable name changes
...
Updates to travis file, readme and help text
7 years ago
Liz Rice
f123db14a9
Update import names and makefile for name change
7 years ago
Amir Jerbi
55fd838191
No need to run install.sh.
...
Simply clone the project, compile the go app and run ./cis_kubernetes
7 years ago
Liz Rice
26cc77ec1d
Get the tests working on deployments where file names may be different or not in path ( #1 )
...
* Replace the default help text
* Readme file, including the test config format documentation
* Typo
* Warn if config files / executables aren't found
* Ignore original name of executable (as per current README)
* Update tests to avoid failing on stat of a non-existant file
* Add a makefile for ease of build
7 years ago
Amir Jerbi
154a140f74
Initial commit
7 years ago