From 3e3aa0ed824048868e62bae636bd903c3d9de12d Mon Sep 17 00:00:00 2001
From: Abubakr-Sadik Nii Nai Davis <dwa2pac@gmail.com>
Date: Thu, 24 Aug 2017 18:30:25 +0000
Subject: [PATCH] Change node check 2.1.6 to use operation `noteq` instead of
`gt`.
Kubelet option --streaming-connection-idle-timeout expects a string
value which fails parsing to integer for greater than comparison.
The string "0" indicates no timeout and this is what we are checking
for.
---
cfg/node.yaml | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/cfg/node.yaml b/cfg/node.yaml
index dfff376..a146baa 100644
--- a/cfg/node.yaml
+++ b/cfg/node.yaml
@@ -79,10 +79,11 @@ groups:
text: "Ensure that the --streaming-connection-idle-timeout argument is not set to 0 (Scored)"
audit: "ps -ef | grep $kubeletbin | grep -v grep"
tests:
+ bin_op: or
test_items:
- flag: "--streaming-connection-idle-timeout"
compare:
- op: gt
+ op: noteq
value: 0
set: true
remediation: "Edit the $kubeletconf file on each node and set the KUBELET_ARGS
--
GitLab