1
0
mirror of https://github.com/aquasecurity/kube-bench.git synced 2024-12-22 22:58:07 +00:00
kube-bench/cfg
mjshastha d2d3e72271
Currently, certain commands involve retrieving all node names or pods and then executing additional commands in a loop, resulting in a time complexity linearly proportional to the number of nodes. (#1597)
This approach becomes time-consuming for larger clusters.

As kube-bench is executed as a job on every node in the cluster, To enhance performance, Streamlined the commands to execute directly on current node where kube-bench operates.
This change ensures that the time complexity remains constant, regardless of the cluster size.
By running the necessary commands only once per node, regardless of how many nodes are in the cluster, this approach significantly boosts performance and efficiency.
2024-04-18 09:01:17 +03:00
..
ack-1.0 Issue: The initial command produces "root:root" as its output only when the file is present. However, if the file is missing, the command will still run successfully, though the desired output of "root:root" won't be obtained. (#1538) 2023-12-18 09:10:07 +02:00
aks-1.0 Fixed typo in policies.yaml (#1113) 2022-03-13 09:27:25 +02:00
cis-1.5 Issue: The initial command produces "root:root" as its output only when the file is present. However, if the file is missing, the command will still run successfully, though the desired output of "root:root" won't be obtained. (#1538) 2023-12-18 09:10:07 +02:00
cis-1.6 Issue: The initial command produces "root:root" as its output only when the file is present. However, if the file is missing, the command will still run successfully, though the desired output of "root:root" won't be obtained. (#1538) 2023-12-18 09:10:07 +02:00
cis-1.6-k3s Fix to empty grep and other cis-1.6-k3s checks (#1352) 2023-01-13 18:06:57 +02:00
cis-1.7 Issue: The initial command produces "root:root" as its output only when the file is present. However, if the file is missing, the command will still run successfully, though the desired output of "root:root" won't be obtained. (#1538) 2023-12-18 09:10:07 +02:00
cis-1.8 Issue: The initial command produces "root:root" as its output only when the file is present. However, if the file is missing, the command will still run successfully, though the desired output of "root:root" won't be obtained. (#1538) 2023-12-18 09:10:07 +02:00
cis-1.20 Issue: The initial command produces "root:root" as its output only when the file is present. However, if the file is missing, the command will still run successfully, though the desired output of "root:root" won't be obtained. (#1538) 2023-12-18 09:10:07 +02:00
cis-1.23 Issue: The initial command produces "root:root" as its output only when the file is present. However, if the file is missing, the command will still run successfully, though the desired output of "root:root" won't be obtained. (#1538) 2023-12-18 09:10:07 +02:00
cis-1.24 Issue: The initial command produces "root:root" as its output only when the file is present. However, if the file is missing, the command will still run successfully, though the desired output of "root:root" won't be obtained. (#1538) 2023-12-18 09:10:07 +02:00
cis-1.24-microk8s fix wrong use of flag in test_items found in 4.13 and 4.14 (#1528) 2023-12-03 09:06:35 +02:00
eks-1.0.1 Fixed typo in policies.yaml (#1113) 2022-03-13 09:27:25 +02:00
eks-1.1.0 Support CIS Amazon Elastic Kubernetes Service (EKS) Benchmark v1.1.0 (#1222) 2022-09-15 09:04:54 +03:00
eks-1.2.0 support CIS Amazon Elastic Kubernetes Service (EKS) Benchmark v1.2.0 (#1449) 2023-05-21 17:53:58 +03:00
eks-stig-kubernetes-v1r6 Adding eks-stig-kubernetes-v1r6 (#1266) 2022-09-14 17:40:48 +03:00
gke-1.0 Fixed typo in policies.yaml (#1113) 2022-03-13 09:27:25 +02:00
gke-1.2.0 Fixed typo in policies.yaml (#1113) 2022-03-13 09:27:25 +02:00
k3s-cis-1.7 Rancher checks correction (#1563) 2024-02-12 15:29:36 +02:00
k3s-cis-1.23 Rancher checks correction (#1563) 2024-02-12 15:29:36 +02:00
k3s-cis-1.24 Rancher checks correction (#1563) 2024-02-12 15:29:36 +02:00
rh-0.7 Fix experimental-encryption-provider-config test on OCP 3.11 - Issue #926 (#1024) 2021-10-27 12:56:00 +03:00
rh-1.0 Currently, certain commands involve retrieving all node names or pods and then executing additional commands in a loop, resulting in a time complexity linearly proportional to the number of nodes. (#1597) 2024-04-18 09:01:17 +03:00
rke2-cis-1.7 Rancher checks correction (#1563) 2024-02-12 15:29:36 +02:00
rke2-cis-1.23 Rancher checks correction (#1563) 2024-02-12 15:29:36 +02:00
rke2-cis-1.24 Rancher checks correction (#1563) 2024-02-12 15:29:36 +02:00
rke-cis-1.7 Rancher checks correction (#1563) 2024-02-12 15:29:36 +02:00
rke-cis-1.23 Rancher checks correction (#1563) 2024-02-12 15:29:36 +02:00
rke-cis-1.24 update rke-cis-1.24 benchmarks: corrected errors and tests (#1570) 2024-02-15 11:34:31 +02:00
tkgi-1.2.53 add support VMware Tanzu(TKGI) Benchmarks v1.2.53 (#1452) 2023-06-01 16:37:50 +03:00
config.yaml support CIS Kubernetes Benchmark v1.8.0 (#1527) 2023-12-02 09:59:30 +02:00