Skip to content
Snippets Groups Projects
Commit 7a538068 authored by Roberto Rojas's avatar Roberto Rojas Committed by Liz Rice
Browse files

fixes issue #346 by explicitly only checking read-only property (#404)

parent 4b5a877f
No related branches found
No related tags found
No related merge requests found
......@@ -96,10 +96,7 @@ groups:
text: "Ensure that the --read-only-port argument is set to 0 (Scored)"
audit: "cat $kubeletconf"
tests:
bin_op: or
test_items:
- path: "{.readOnlyPort}"
set: false
- path: "{.readOnlyPort}"
compare:
op: eq
......
......@@ -74,15 +74,12 @@ groups:
text: "Ensure that the --read-only-port argument is set to 0 (Scored)"
audit: "cat $kubeletconf"
tests:
bin_op: or
test_items:
- path: "{.readOnlyPort}"
compare:
op: eq
value: 0
set: true
- path: "{.readOnlyPort}"
set: false
remediation: |
If using a Kubelet config file, edit the file to set readOnlyPort to 0 .
If using command line arguments, edit the kubelet service file
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment