- May 18, 2021
-
-
Yoav Rotem authored
* Test 1.2.24 should be manual * Test 1.2.26 should be manual * Test 1.2.26 should be manual * Change test 1.2.26 * Change test 1.2.26 * Change test 1.2.26 * Change test 1.2.26 * Change test 1.2.26
-
Yoav Rotem authored
* Create controlplane.yaml * Update and tidy yaml * Update and tidy yaml * Update and tidy yaml
-
- May 11, 2021
-
-
hbc authored
* cfg: add `/etc/default/kubeletconfig.json` * fix(cfg): search kubeletconfig.json first * feat: mount `/etc/default` from host for AKS cluster Co-authored-by:
Yoav Rotem <yoavrotems97@gmail.com>
-
Huang Huang authored
* Support CIS ACK 1.0.0 benchmark * fix yaml lint * Fix TestMakeSubsitutions may failed when order of map changed * Support auto-detect platform when running on ACK * Apply suggestions from code review Co-authored-by:
Yoav Rotem <yoavrotems97@gmail.com> Co-authored-by:
Yoav Rotem <yoavrotems97@gmail.com>
-
- May 09, 2021
-
-
Yoav Rotem authored
* Add detected kubernetes version to controls * Refactore NewControls function Now new Control function is expecting detected version argument. * Refactore NewControls function Now new Control function is expecting detected version argument. * Refactore NewControls function New Control function is expecting detected version argument. * Add detected kube version * add detecetedKubeVersion * Add detecetedKubeVersion * Add detectedKubeVersion * Add detecetedKubeVersion * Fix missing version * Change version Change version from 3.10 to rh-0.7 * fix version: "cis-1.5" * fix version: "cis-1.5" * fix version: "cis-1.5" * Fix version: "cis-1.5" * Fix version: "cis-1.5" * Fix version: "cis-1.6" * Fix version: "cis-1.6" * Fix version: "cis-1.6" * Fix version: "cis-1.6" * Fix version: "cis-1.6"
-
Huang Huang authored
-
- May 02, 2021
-
-
Gábor Lipták authored
* Bring Go to 1.16 * Bring Go to 1.16 * Bump actions/setup-go to v2 * Bump actions/setup-go to v2
- Apr 29, 2021
-
- Apr 08, 2021
-
-
Dmytro Oboznyi authored
* Fix file permissions false positive Signed-off-by:
Dmytro Oboznyi <dmytro.oboznyi@syncier.com> * Added kops files to config path list Signed-off-by:
Dmytro Oboznyi <dmytro.oboznyi@syncier.com> * Automated CNI files checks Signed-off-by:
Dmytro Oboznyi <dmytro.oboznyi@syncier.com> * Fixed linting Signed-off-by:
Dmytro Oboznyi <dmytro.oboznyi@syncier.com> * Fixed to right folder CNI test Signed-off-by:
Dmytro Oboznyi <dmytro.oboznyi@syncier.com> * Changed Automated to manual Signed-off-by:
Dmytro Oboznyi <dmytro.oboznyi@syncier.com> * Removed changes from remediation Signed-off-by:
Dmytro Oboznyi <dmytro.oboznyi@syncier.com> * Added path to config files Signed-off-by:
Dmytro Oboznyi <dmytro.oboznyi@syncier.com> * Update cfg/cis-1.6/master.yaml Co-authored-by:
Yoav Rotem <yoavrotems97@gmail.com> Signed-off-by:
Dmytro Oboznyi <dmytro.oboznyi@syncier.com> * Fix Signed-off-by:
Dmytro Oboznyi <dmytro.oboznyi@syncier.com> * Fix to job.yaml Signed-off-by:
Dmytro Oboznyi <dmytro.oboznyi@syncier.com> * Add extra mountpoints Signed-off-by:
Dmytro Oboznyi <dmytro.oboznyi@syncier.com> * Revert audit scripts changes Signed-off-by:
Dmytro Oboznyi <dmytro.oboznyi@syncier.com> Co-authored-by:
Yoav Rotem <yoavrotems97@gmail.com>
-
- Mar 24, 2021
-
-
Yoav Rotem authored
* Add OCP auto-detection * Add test for openshift * update and fix bugs update file to match with new kube-bench features and fix bugs * Update file and fix bugs update file to match with new kube-bench features and fix bugs * Remove specific configs Those configs could be set in main config.yaml * Update to include openshift files * fix typos * fix typo * Remove trailing spaces * Update util.go * Add tests for getOcpValidVersion
-
- Mar 22, 2021
-
-
Yoav Rotem authored
* Add more logging The old logging could was lacking and in some cases misleading * Add Logging Add more logs and change some old messages, the important part is make each test log more readable by adding ------ test id ------ section in logs * Fix typos * more info add more info in comment about the function and it use cases Co-authored-by:
Liz Rice <liz@lizrice.com> * Use switch case Change the logic from if to switch and tidy up the code
-
- Mar 21, 2021
-
-
Neha Viswanathan authored
-
- Mar 02, 2021
-
-
Yoav Rotem authored
* Fix fallback to default version In some cases kube-bench will crush instead of fallback to default version. Fix it to only log that couldn't auto-detect version and used default. * Fix case with fallback to default version
-
- Feb 23, 2021
-
-
Yoav Rotem authored
* Add more logging issue #816 add more logging for better debug and information about version auto-detection and fix typo * Fix typo * Add more logging issue #816 add more logging for better debug and information about version auto-detection and fix typo * tidy logging output Co-authored-by:
Liz Rice <liz@lizrice.com> * tidy logging output Co-authored-by:
Liz Rice <liz@lizrice.com> * tidy logging output Co-authored-by:
Liz Rice <liz@lizrice.com> * tidy logging output Co-authored-by:
Liz Rice <liz@lizrice.com> * tidy logging output Co-authored-by:
Liz Rice <liz@lizrice.com> * tidy logging output Co-authored-by:
Liz Rice <liz@lizrice.com> * tidy logging output Co-authored-by:
Liz Rice <liz@lizrice.com> * Remove extra logging Co-authored-by:
Liz Rice <liz@lizrice.com>
-
Neha Viswanathan authored
* deprecate master and node subcommands * deprecate master and node subcommands
-
Naoki Oketani authored
-
Takahiro Tsuruda authored
* chore: call defer func for each iteration Signed-off-by:
TakahiroTsuruda <isrgnoe@gmail.com> * chore: error check
-
Liz Rice authored
* docs: remove references to deprecated subcommands Removing master / node since it's better to autodetect, or to use --target Signed-off-by:
Liz Rice <liz@lizrice.com> * docs: specifying kubernetes or benchmark version Signed-off-by:
Liz Rice <liz@lizrice.com>
-
Liz Rice authored
* chore: fix YAML lint * chore: fix YAML lint
-
- Feb 22, 2021
-
-
Michael Kandelaars authored
* Refactor to use Configmap for EKS and ASFF integration * newline * markdown fix * formatting fix * Update docs/asff.md Co-authored-by:
Liz Rice <liz@lizrice.com> * typo * docs: remove section about rebuilding * docs: reminder to specify kube-bench image for ASFF Co-authored-by:
Liz Rice <liz@lizrice.com>
-
Liz Rice authored
Ask for more details that we usually need to request anyway, like the list of currently running processes Signed-off-by:
Liz Rice <liz@lizrice.com>
-
- Feb 11, 2021
-
-
Thorsten Schifferdecker authored
Signed-off-by:
Thorsten Schifferdecker <ts@systs.org>
-
Dmytro Oboznyi authored
* Automated testing 1.2.34 Signed-off-by:
Dmytro Oboznyi <dmytro.oboznyi@syncier.com> * Changed automation status in test Signed-off-by:
Dmytro Oboznyi <dmytro.oboznyi@syncier.com> * Changed one more test Signed-off-by:
Dmytro Oboznyi <dmytro.oboznyi@syncier.com> * Changed Automated to manual Signed-off-by:
Dmytro Oboznyi <dmytro.oboznyi@syncier.com>
-
- Feb 10, 2021
-
-
Felipe Augusto de Castro authored
-
Giuseppe Ingoglia authored
Solving issue raised in #819
-
- Jan 21, 2021
- Jan 20, 2021
-
-
Dmytro Oboznyi authored
Signed-off-by:
Dmytro Oboznyi <dmytro.oboznyi@syncier.com>
-
- Jan 18, 2021
-
-
Huang Huang authored
-
- Jan 13, 2021
-
-
Dmytro Oboznyi authored
-
- Jan 04, 2021
-
-
Liz Rice authored
-
- Dec 27, 2020
-
-
Carol Valencia authored
Co-authored-by:
Carol Valencia <krol3@users.noreply.github.com>
-
- Dec 24, 2020
-
-
Liz Rice authored
* Add expectedResultPattern to invalid test when testing and try convert to numeric we didn't set expectedResultPattern value. * check for auditconfig before using it The current state is that when ever audit output is not what we search for we check for auditConfig output which is sometime empty and therefore create empty expected result as described in #694 * Fix issue about expectedResultPattern expectedResultPattern not always shown and wasn't accurate enough Issue #705 * Add tests for ExpectedResult and fixes Add tests for ExpectedResult with the new output and the verify that the fix is working * Add missing flags In some cases not having audit or audit_config flag would fail the test. So added just a simple commands like echo something to solve this issue Also add bitmask checks * Add example IAM policy * Pass RotateKubeletServerCertificate related checks if it's not found (#767) * Allow for environment variables to be checked in tests (#755) * Initial commit for checking environment variables for etcd * Revert config changes * Remove redundant struct data * Fix issues with failing tests * Initial changes based on code review * Add option to disable envTesting + Update docs * Initial tests * Finished testing * Fix broken tests * Add a total summary and always show all tests. (#759) Whether the total summary is shown can be specified with an option. Fixes #528 Signed-off-by:
Christian Zunker <christian.zunker@codecentric.cloud> * Update Readme.md file with link to Contribution guide (#754) * Update License with the year and the owner name Please add this to make your license agreement strong * Updated Readme.md file with license and proper documentation links I have added a proper license agreement to the documentation. Also shortened the links to the issues so that it does not break in any on the forks. * Update LICENSE * Update README.md * Update README.md * Remove erroneous license info Co-authored-by:
Liz Rice <liz@lizrice.com> * Support auto-detect platform when running on EKS or GKE (#683) * Support auto-detect platform when running on EKS or GKE * Change to get platform name from `kubectl version` * fix regexp and add test * Update Server Version match for EKS * try to get version info from api sever at first * Change expected expectedResultPattern Now expectedResultPattern is more verbose * Update ops tests * Fix unit tests * Fix bitmask output syntax * Changes to be committed: modified: check/check.go modified: check/test.go modified: check/test_test.go fix unit testing and test.go to resolve conflicts. * Change found to flagFound * add missing } * change found to flag found Co-authored-by:
yoavrotems <yoavrotems97@gmail.com>
-
- Dec 23, 2020
-
-
Liz Rice authored
* Rename workflow to workflows * Add integration tests to Actions * Upload code coverage after unit test * don't need code coverage when we do a release * Use same Go version as in go.mod * Use same Go version as go.mod
-
- Dec 21, 2020
-
-
Liz Rice authored
* Add example IAM policy * Pass RotateKubeletServerCertificate related checks if it's not found (#767) * Allow for environment variables to be checked in tests (#755) * Initial commit for checking environment variables for etcd * Revert config changes * Remove redundant struct data * Fix issues with failing tests * Initial changes based on code review * Add option to disable envTesting + Update docs * Initial tests * Finished testing * Fix broken tests * Add a total summary and always show all tests. (#759) Whether the total summary is shown can be specified with an option. Fixes #528 Signed-off-by:
Christian Zunker <christian.zunker@codecentric.cloud> * Update Readme.md file with link to Contribution guide (#754) * Update License with the year and the owner name Please add this to make your license agreement strong * Updated Readme.md file with license and proper documentation links I have added a proper license agreement to the documentation. Also shortened the links to the issues so that it does not break in any on the forks. * Update LICENSE * Update README.md * Update README.md * Remove erroneous license info Co-authored-by:
Liz Rice <liz@lizrice.com> * Support auto-detect platform when running on EKS or GKE (#683) * Support auto-detect platform when running on EKS or GKE * Change to get platform name from `kubectl version` * fix regexp and add test * Update Server Version match for EKS * try to get version info from api sever at first * Refactor group skip changed group 'skip' from being a bool to be 'type' string as done in check * Change skip: true -> type: skip Co-authored-by:
Huang Huang <mozillazg101@gmail.com> Co-authored-by:
Wicked <jason_attwood@hotmail.co.uk> Co-authored-by:
Christian Zunker <827818+czunker@users.noreply.github.com> Co-authored-by:
Kaiwalya Koparkar <kaiwalyakoparkar@gmail.com> Co-authored-by:
Yoav Rotem <yoavrotems97@gmail.com>
-
Carol Valencia authored
* feat: github actions to publish ecr and docker * fix: yaml lint in build Co-authored-by:
Carol Valencia <krol3@users.noreply.github.com>
-
Greg DeKoenigsberg authored
The command you listed here did not work. The command from the official documentation did: https://docs.aws.amazon.com/AmazonECR/latest/userguide/getting-started-cli.html aws ecr get-login-password --region region | docker login --username AWS --password-stdin aws_account_id.dkr.ecr.region.amazonaws.com
-
- Dec 17, 2020
-
-
Liz Rice authored
-