From c87c5cfb515c98f2924725f212654252d429e06c Mon Sep 17 00:00:00 2001
From: Roberto Rojas <robertojrojas@gmail.com>
Date: Sat, 13 Jul 2019 02:35:44 -0400
Subject: [PATCH] Fixes bugs on tests 2.1.4 and 2.1.5 - 1.13-json (#365)
* Adds bin_op to Test 2.1.4
* Adds bin_op to Test 2.1.5
---
cfg/1.13-json/node.yaml | 6 ++++++
1 file changed, 6 insertions(+)
diff --git a/cfg/1.13-json/node.yaml b/cfg/1.13-json/node.yaml
index a061dc4..3f7c2b2 100644
--- a/cfg/1.13-json/node.yaml
+++ b/cfg/1.13-json/node.yaml
@@ -74,12 +74,15 @@ groups:
text: "Ensure that the --read-only-port argument is set to 0 (Scored)"
audit: "cat $kubeletconf"
tests:
+ bin_op: or
test_items:
- path: "{.readOnlyPort}"
compare:
op: eq
value: 0
set: true
+ - path: "{.readOnlyPort}"
+ set: false
remediation: |
If using a Kubelet config file, edit the file to set readOnlyPort to 0 .
If using command line arguments, edit the kubelet service file
@@ -95,12 +98,15 @@ groups:
text: "Ensure that the --streaming-connection-idle-timeout argument is not set to 0 (Scored)"
audit: "cat $kubeletconf"
tests:
+ bin_op: or
test_items:
- path: "{.streamingConnectionIdleTimeout}"
compare:
op: noteq
value: 0
set: true
+ - path: "{.streamingConnectionIdleTimeout}"
+ set: false
remediation: |
If using a Kubelet config file, edit the file to set streamingConnectionIdleTimeout to a
value other than 0.
--
GitLab