11 Commits (dddc42f046a6e9a10ad80f202612f8af7dcdc4f8)

Author	SHA1	Message	Date
Simarpreet Singh	dddc42f046	cfg: remove erroneous whitespaces in yaml ... Signed-off-by: Simarpreet Singh <simar@linux.com>	5 years ago
Liz Rice	dd8e7ec874	Merge branch 'master' into fix-208	5 years ago
Abubakr-Sadik Nii Nai Davis	a88b0703d8	Add kubeconfig variable substitution for kubelet and proxy. ... There are checks for the kubeconfig for both kubelet and proxy which the current kube-bench implementation does not check for properly. kube-bench checks the wrong files. This PR adds support for variable substitution for all the config file types are that should be checked in the CIS benchmarks. This PR also fixes a buggy in CIS 1.3.0 check 2.2.9, which checks for ownership of the kubelet config file /var/lib/kubelet/config.yaml but recommends changing ownership of kubelet kubeconfig file /etc/kubernetes/kubelet.conf as remediation.	5 years ago
Abubakr-Sadik Nii Nai Davis	3f98c1def2	Fix wrong reference to kubelet.config in node checks. ... This fix applies to only checks for kubernetes versions 1.8 and 1.11. See https://github.com/aquasecurity/kube-bench/pull/208.	5 years ago
Liz Rice	d712db47a2	Only find flags on the process we really want	5 years ago
Vladimir Dimov	645d23e1ec	fixing typos 2.1.15	6 years ago
Abubakr-Sadik Nii Nai Davis	0a5358665e	By default --make-iptables-util-chain is true, so PASS if this flag is not set.	6 years ago
Michal Jankowski	5f254de415	Fixing checks 2.2.9 and 2.2.10 on 1.11 nodes. ... Path to kubelet configuration was accidentally prefixed with a dollar symbol (probably as a result of copying some other test that used variable name). After removing the dollar sign from paths both checks pass on conforming deployment.	6 years ago
Abubakr-Sadik Nii Nai Davis	97623aea05	Update kubernetes node benchmark to check kubelet systemd unitfile. ... Also clean up the config file for 1.11 a bit.	6 years ago
Abubakr-Sadik Nii Nai Davis	b1369832bc	A few corrections to node tests. (#2) ... * Add a few corrections. * Add a few corrections to node test file.	6 years ago
noqcks	b3a115963b	adding 1.11 config and node checks	6 years ago