diff --git a/cfg/1.13-json/node.yaml b/cfg/1.13-json/node.yaml index 394ebc82b93da06fe7f2a25017e267c76ffdf217..3b34190d7a949be13e1a3bc65a3a2f25fb94c4a6 100644 --- a/cfg/1.13-json/node.yaml +++ b/cfg/1.13-json/node.yaml @@ -226,11 +226,12 @@ groups: scored: true - id: 2.1.11 - text: "Ensure that the --cadvisor-port argument is set to 0 (Scored)" + text: "[DEPRECATED] Ensure that the --cadvisor-port argument is set to 0" # This is one of those properties that can only be set as a command line argument. # To check if the property is set as expected, we need to parse the kubelet command # instead reading the Kubelet Configuration file. audit: "ps -fC $kubeletbin" + type: skip tests: bin_op: or test_items: @@ -248,7 +249,7 @@ groups: Based on your system, restart the kubelet service. For example: systemctl daemon-reload systemctl restart kubelet.service - scored: true + scored: false - id: 2.1.12 text: "Ensure that the --rotate-certificates argument is not set to false (Scored)"