mirror of
https://github.com/aquasecurity/kube-bench.git
synced 2024-11-22 16:18:07 +00:00
d12a45bba9
* common_test: Add a failing test to show the SISEGV Signed-off-by: Simarpreet Singh <simar@linux.com> * common: Go green by fixing isMaster() to instantiate viper Signed-off-by: Simarpreet Singh <simar@linux.com> * common: Inject a seam for getBinariesFunc to be patched-in. Also adds additional tests to showcase unhappy behaviors. Signed-off-by: Simarpreet Singh <simar@linux.com> * common_test: Rename TestIsMaster() Signed-off-by: Simarpreet Singh <simar@linux.com> * common: init viper with master config Signed-off-by: Simarpreet Singh <simar@linux.com> * common: Add a pre-check if valid yaml is passed but doesn't include master. Also adds additional tests to showcase unhappy behaviors. Signed-off-by: Simarpreet Singh <simar@linux.com> * mod: Upgrade viper to v1.4.0 Signed-off-by: Simarpreet Singh <simar@linux.com> * common: Refactor node only yaml to a file Signed-off-by: Simarpreet Singh <simar@linux.com> * common: Log when master components are not found Signed-off-by: Simarpreet Singh <simar@linux.com> * common_test: Refactor subtests into a table Signed-off-by: Simarpreet Singh <simar@linux.com>
62 lines
2.1 KiB
YAML
62 lines
2.1 KiB
YAML
---
|
|
node:
|
|
components:
|
|
- kubelet
|
|
- proxy
|
|
# kubernetes is a component to cover the config file /etc/kubernetes/config that is referred to in the benchmark
|
|
- kubernetes
|
|
|
|
kubernetes:
|
|
defaultconf: "/etc/kubernetes/config"
|
|
|
|
kubelet:
|
|
cafile:
|
|
- "/etc/kubernetes/pki/ca.crt"
|
|
- "/etc/kubernetes/certs/ca.crt"
|
|
- "/etc/kubernetes/cert/ca.pem"
|
|
svc:
|
|
# These paths must also be included
|
|
# in the 'confs' property below
|
|
- "/etc/systemd/system/kubelet.service.d/10-kubeadm.conf"
|
|
- "/etc/systemd/system/kubelet.service"
|
|
- "/lib/systemd/system/kubelet.service"
|
|
bins:
|
|
- "hyperkube kubelet"
|
|
- "kubelet"
|
|
kubeconfig:
|
|
- "/etc/kubernetes/kubelet.conf"
|
|
- "/var/lib/kubelet/kubeconfig"
|
|
- "/etc/kubernetes/kubelet-kubeconfig"
|
|
confs:
|
|
- "/var/lib/kubelet/config.yaml"
|
|
- "/etc/kubernetes/kubelet/kubelet-config.json"
|
|
- "/home/kubernetes/kubelet-config.yaml"
|
|
- "/etc/default/kubelet"
|
|
## Due to the fact that the kubelet might be configured
|
|
## without a kubelet-config file, we use a work-around
|
|
## of pointing to the systemd service file (which can also
|
|
## hold kubelet configuration).
|
|
## Note: The following paths must match the one under 'svc'
|
|
- "/etc/systemd/system/kubelet.service.d/10-kubeadm.conf"
|
|
- "/etc/systemd/system/kubelet.service"
|
|
- "/lib/systemd/system/kubelet.service"
|
|
defaultconf: "/var/lib/kubelet/config.yaml"
|
|
defaultsvc: "/etc/systemd/system/kubelet.service.d/10-kubeadm.conf"
|
|
defaultkubeconfig: "/etc/kubernetes/kubelet.conf"
|
|
defaultcafile: "/etc/kubernetes/pki/ca.crt"
|
|
|
|
proxy:
|
|
bins:
|
|
- "kube-proxy"
|
|
- "hyperkube proxy"
|
|
- "hyperkube kube-proxy"
|
|
- "proxy"
|
|
confs:
|
|
- /etc/kubernetes/proxy
|
|
- /etc/kubernetes/addons/kube-proxy-daemonset.yaml
|
|
kubeconfig:
|
|
- /etc/kubernetes/kubelet-kubeconfig
|
|
svc:
|
|
- "/lib/systemd/system/kube-proxy.service"
|
|
defaultconf: /etc/kubernetes/addons/kube-proxy-daemonset.yaml
|
|
defaultkubeconfig: "/etc/kubernetes/proxy.conf" |