From 8276e521d4c725e20b862a2839dfd60107045dd7 Mon Sep 17 00:00:00 2001
From: mwwolters <mwwolters@google.com>
Date: Tue, 5 Nov 2019 12:29:16 -0800
Subject: [PATCH] Changed 1.3.3 to check that --use-service-account-credentials
isn't set to false, but the flag is set (#442)
---
cfg/1.11/master.yaml | 4 ++--
cfg/1.13/master.yaml | 4 ++--
2 files changed, 4 insertions(+), 4 deletions(-)
diff --git a/cfg/1.11/master.yaml b/cfg/1.11/master.yaml
index bb0cd28..c9b0ae3 100644
--- a/cfg/1.11/master.yaml
+++ b/cfg/1.11/master.yaml
@@ -759,8 +759,8 @@ groups:
test_items:
- flag: "--use-service-account-credentials"
compare:
- op: eq
- value: true
+ op: noteq
+ value: false
set: true
remediation: |
Edit the Controller Manager pod specification file $controllermanagerconf
diff --git a/cfg/1.13/master.yaml b/cfg/1.13/master.yaml
index c10ead7..8e5a52e 100644
--- a/cfg/1.13/master.yaml
+++ b/cfg/1.13/master.yaml
@@ -762,8 +762,8 @@ groups:
test_items:
- flag: "--use-service-account-credentials"
compare:
- op: eq
- value: true
+ op: noteq
+ value: false
set: true
remediation: |
Edit the Controller Manager pod specification file $controllermanagerconf
--
GitLab