diff --git a/cfg/1.13/master.yaml b/cfg/1.13/master.yaml index e2ac93acc56124c844f6cfe0f87f52a6fe29f52a..6a36b9e85daff76efe9a6040ead39324fab40542 100644 --- a/cfg/1.13/master.yaml +++ b/cfg/1.13/master.yaml @@ -220,12 +220,15 @@ groups: text: "Ensure that the admission control plugin NamespaceLifecycle is set (Scored)" audit: "ps -ef | grep $apiserverbin | grep -v grep" tests: + bin_op: or test_items: - flag: "--disable-admission-plugins" compare: op: nothave value: "NamespaceLifecycle" set: true + - flag: "--disable-admission-plugins" + set: false remediation: | Edit the API server pod specification file $apiserverconf on the master node and set the --disable-admission-plugins parameter to