1
0
mirror of https://github.com/aquasecurity/kube-bench.git synced 2024-11-15 12:29:04 +00:00
kube-bench/cmd
Abubakr-Sadik Nii Nai Davis a88b0703d8 Add kubeconfig variable substitution for kubelet and proxy.
There are checks for the kubeconfig for both kubelet and proxy which
the current kube-bench implementation does not check for properly.
kube-bench checks the wrong files.

This PR adds support for variable substitution for all the config file
types are that should be checked in the CIS benchmarks.

This PR also fixes a buggy in CIS 1.3.0 check 2.2.9, which checks for
ownership of the kubelet config file /var/lib/kubelet/config.yaml but
recommends changing ownership of kubelet kubeconfig file
/etc/kubernetes/kubelet.conf as remediation.
2019-02-27 22:15:14 +00:00
..
common.go Add kubeconfig variable substitution for kubelet and proxy. 2019-02-27 22:15:14 +00:00
database.go Lint all code for golint tests 2018-01-11 10:01:58 -08:00
federated.go Add function to retrieve Kubernetes server version. 2017-09-17 19:49:13 +00:00
master.go Add function to retrieve Kubernetes server version. 2017-09-17 19:49:13 +00:00
node.go Add function to retrieve Kubernetes server version. 2017-09-17 19:49:13 +00:00
root.go Add link to CIS kubernetes benchmark 2018-08-10 20:55:02 +01:00
util_test.go Add getServiceFiles function. 2018-10-23 02:26:38 +00:00
util.go Add kubeconfig variable substitution for kubelet and proxy. 2019-02-27 22:15:14 +00:00