From d059196b71560a57529af0bc1c02ba912e6b72c9 Mon Sep 17 00:00:00 2001
From: yoavrotems <yoavrotems97@gmail.com>
Date: Mon, 25 Mar 2019 14:41:06 +0200
Subject: [PATCH] Update master.yaml
Fix 1.1.23 to check *if* --service-account-lookup argument is set and if so then if it's equal to true
---
cfg/1.13/master.yaml | 3 +++
1 file changed, 3 insertions(+)
diff --git a/cfg/1.13/master.yaml b/cfg/1.13/master.yaml
index 9518b35..38f2195 100644
--- a/cfg/1.13/master.yaml
+++ b/cfg/1.13/master.yaml
@@ -366,7 +366,10 @@ groups:
text: "Ensure that the --service-account-lookup argument is set to true (Scored)"
audit: "ps -ef | grep $apiserverbin | grep -v grep"
tests:
+ bin_op: or
test_items:
+ - flag: "--service-account-lookup"
+ set: false
- flag: "--service-account-lookup"
compare:
op: eq
--
GitLab