arno/kube-bench
1
0
Fork 0
mirror of https://github.com/aquasecurity/kube-bench.git synced 2024-11-22 16:18:07 +00:00
Code Issues Releases Wiki Activity
72f5a54777
kube-bench/cfg
History
Saurabh Misra 72f5a54777 FIXING RKE2-CIS-1.24 CHECKS 
. MASTER:
            a. Checks 1.1.10,1.1.20 are manual according to https://docs.rke2.io/security/cis_self_assessment124#1110-ensure-that-the-container-network-interface-file-ownership-is-set-to-root-manual and https://docs.rke2.io/security/cis_self_assessment124#1110-ensure-that-the-container-network-interface-file-ownership-is-set-to-root-manual respectively.
            b. Check 1.3.6 is not relevant to an RKE2 cluster as RKE2 rotates TLS certificates internally - https://github.com/rancher/dashboard/issues/4485. We will skip it and not score it

    2. NODE:
            a. Check 4.2.12 is the node-level equivalent of the master-level check 1.3.6 and is treated the same way.
2024-09-19 18:08:05 +05:30
..
ack-1.0 Issue: The initial command produces "root:root" as its output only when the file is present. However, if the file is missing, the command will still run successfully, though the desired output of "root:root" won't be obtained. (#1538) 2023-12-18 09:10:07 +02:00
aks-1.0 Fixed typo in policies.yaml (#1113) 2022-03-13 09:27:25 +02:00
cis-1.5 Issue: The initial command produces "root:root" as its output only when the file is present. However, if the file is missing, the command will still run successfully, though the desired output of "root:root" won't be obtained. (#1538) 2023-12-18 09:10:07 +02:00
cis-1.6 Issue: The initial command produces "root:root" as its output only when the file is present. However, if the file is missing, the command will still run successfully, though the desired output of "root:root" won't be obtained. (#1538) 2023-12-18 09:10:07 +02:00
cis-1.6-k3s Fix to empty grep and other cis-1.6-k3s checks (#1352) 2023-01-13 18:06:57 +02:00
cis-1.7 Issue: The initial command produces "root:root" as its output only when the file is present. However, if the file is missing, the command will still run successfully, though the desired output of "root:root" won't be obtained. (#1538) 2023-12-18 09:10:07 +02:00
cis-1.8 Issue: The initial command produces "root:root" as its output only when the file is present. However, if the file is missing, the command will still run successfully, though the desired output of "root:root" won't be obtained. (#1538) 2023-12-18 09:10:07 +02:00
cis-1.9 Add CIS kubernetes CIS-1.9 for k8s v1.27 - v1.29 (#1617) 2024-06-26 15:53:57 +03:00
cis-1.20 Issue: The initial command produces "root:root" as its output only when the file is present. However, if the file is missing, the command will still run successfully, though the desired output of "root:root" won't be obtained. (#1538) 2023-12-18 09:10:07 +02:00
cis-1.23 Issue: The initial command produces "root:root" as its output only when the file is present. However, if the file is missing, the command will still run successfully, though the desired output of "root:root" won't be obtained. (#1538) 2023-12-18 09:10:07 +02:00
cis-1.24 Issue: The initial command produces "root:root" as its output only when the file is present. However, if the file is missing, the command will still run successfully, though the desired output of "root:root" won't be obtained. (#1538) 2023-12-18 09:10:07 +02:00
cis-1.24-microk8s fix wrong use of flag in test_items found in 4.13 and 4.14 (#1528) 2023-12-03 09:06:35 +02:00
eks-1.0.1 Fixed typo in policies.yaml (#1113) 2022-03-13 09:27:25 +02:00
eks-1.1.0 Support CIS Amazon Elastic Kubernetes Service (EKS) Benchmark v1.1.0 (#1222) 2022-09-15 09:04:54 +03:00
eks-1.2.0 support CIS Amazon Elastic Kubernetes Service (EKS) Benchmark v1.2.0 (#1449) 2023-05-21 17:53:58 +03:00
eks-stig-kubernetes-v1r6 Adding eks-stig-kubernetes-v1r6 (#1266) 2022-09-14 17:40:48 +03:00
gke-1.0 Fixed typo in policies.yaml (#1113) 2022-03-13 09:27:25 +02:00
gke-1.2.0 Fixed typo in policies.yaml (#1113) 2022-03-13 09:27:25 +02:00
k3s-cis-1.7 Replace custom k3s etcd script checks with vanilla grep checks (#1601) 2024-05-20 13:47:15 +03:00
k3s-cis-1.23 Replace custom k3s etcd script checks with vanilla grep checks (#1601) 2024-05-20 13:47:15 +03:00
k3s-cis-1.24 Replace custom k3s etcd script checks with vanilla grep checks (#1601) 2024-05-20 13:47:15 +03:00
rh-0.7 Fix experimental-encryption-provider-config test on OCP 3.11 - Issue #926 (#1024) 2021-10-27 12:56:00 +03:00
rh-1.0 Currently, certain commands involve retrieving all node names or pods and then executing additional commands in a loop, resulting in a time complexity linearly proportional to the number of nodes. (#1597) 2024-04-18 09:01:17 +03:00
rke2-cis-1.7 Rancher checks correction (#1563) 2024-02-12 15:29:36 +02:00
rke2-cis-1.23 Rancher checks correction (#1563) 2024-02-12 15:29:36 +02:00
rke2-cis-1.24 FIXING RKE2-CIS-1.24 CHECKS 2024-09-19 18:08:05 +05:30
rke-cis-1.7 Rancher checks correction (#1563) 2024-02-12 15:29:36 +02:00
rke-cis-1.23 Rancher checks correction (#1563) 2024-02-12 15:29:36 +02:00
rke-cis-1.24 update rke-cis-1.24 benchmarks: corrected errors and tests (#1570) 2024-02-15 11:34:31 +02:00
tkgi-1.2.53 add support VMware Tanzu(TKGI) Benchmarks v1.2.53 (#1452) 2023-06-01 16:37:50 +03:00
config.yaml Add CIS kubernetes CIS-1.9 for k8s v1.27 - v1.29 (#1617) 2024-06-26 15:53:57 +03:00