mirror of
https://github.com/aquasecurity/kube-bench.git
synced 2024-12-18 20:58:10 +00:00
17cd104788
* Fixes issue #574: change the PATH in container And change to use `/usr/local/mount-from-host/bin` as mount path. Fixes #574 * Fix integration tests
51 lines
1.5 KiB
YAML
51 lines
1.5 KiB
YAML
---
|
|
# use this pod with: kubectl run ubuntu -it --pid=host -- /bin/bash
|
|
# this allows you to debug what is running on the host.
|
|
apiVersion: v1
|
|
kind: Pod
|
|
metadata:
|
|
name: ubuntu
|
|
spec:
|
|
hostPID: true
|
|
containers:
|
|
- name: ubuntu
|
|
image: ubuntu
|
|
command: ["/bin/bash", "-c", "--"]
|
|
args: ["while true; do sleep 30; done;"]
|
|
env:
|
|
- name: PATH
|
|
value: "/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/local/mount-from-host/bin"
|
|
volumeMounts:
|
|
- name: var-lib-kubelet
|
|
mountPath: /var/lib/kubelet
|
|
- name: etc-systemd
|
|
mountPath: /etc/systemd
|
|
- name: etc-kubernetes
|
|
mountPath: /etc/kubernetes
|
|
# /usr/local/mount-from-host/bin is mounted to access kubectl / kubelet, for auto-detecting the Kubernetes version.
|
|
# You can omit this mount if you specify --version as part of the command.
|
|
- name: usr-bin
|
|
mountPath: /usr/local/mount-from-host/bin
|
|
- name: kind-bin
|
|
mountPath: /kind/bin
|
|
resources:
|
|
limits:
|
|
memory: "128Mi"
|
|
cpu: "500m"
|
|
volumes:
|
|
- name: var-lib-kubelet
|
|
hostPath:
|
|
path: "/var/lib/kubelet"
|
|
- name: etc-systemd
|
|
hostPath:
|
|
path: "/etc/systemd"
|
|
- name: etc-kubernetes
|
|
hostPath:
|
|
path: "/etc/kubernetes"
|
|
- name: usr-bin
|
|
hostPath:
|
|
path: "/usr/bin"
|
|
- name: kind-bin
|
|
hostPath:
|
|
path: "/kind/bin"
|