- Sep 17, 2020
-
-
yoavrotems authored
* Add new cis version yamls Add new cis version yamls * Add new cis version yamls * Add cis-1.6 to versions table * support version mapping cis-1.6 * support version mapping cis-1.6 * Update controlplane.yaml * Update etcd.yaml * Update node.yaml * Update policies.yaml * Create job.data * Create job-node.data * Create job-master.data * Create add-tls-kind.yaml * Change node version to 1.15.0 * Add tests for cis-1.6 * Delete node_only.yaml * Change tests 1.1.19-1.1.21 Change 1.1.19-1.1.21 because failing tests * Update job.data * Update job-master.data * Update job-master.data * Update job.data * fix 1.2.35 remediation tabs instead of spaces * Update job-master.data * Remove extra space * Update job.data * Create node_only.yaml * Add tests for cis-1.6 Add tests for cis-1.6 and change some from 1,5 to 1.6 * Fix typo * Add mapping for cis-1.6 * Remove extra space in 1.2.35 remediation * Update job.data * Update job-master.data * Fix type 1.2.35 * Remove trailing spaces * Remove trailing spaces * Remove trailing spaces * Remove trailing spaces * Add version 1.19 kubernetes support * Add version 1.19 kubernetes support * Add version 1.19 kubernetes support
-
- Sep 01, 2020
-
-
Satya Pawan authored
* Code quality improvements such - 1. Improves empty string test (len vs str == "") 2. Converts fmt.Sprintf to string literal and Printf to Print where possible (as the dynamic args are missing!) * Delete .deepsource.toml Co-authored-by:
DeepSource Bot <bot@deepsource.io> Co-authored-by:
Liz Rice <liz@lizrice.com>
-
- Aug 30, 2020
-
-
Liz Rice authored
* move target mapping to config.yaml * Update config.yaml * Update common.go * Add support for eks-1.0 Add also eks-1.0 to map * chore: merge correction * Move file only used for testing * Tidier logs * Add target mapping for GKE and EKS * fingers cross this finishes target mapping Co-authored-by:
Murali Paluru <leodotcloud@gmail.com> Co-authored-by:
Roberto Rojas <robertojrojas@gmail.com> Co-authored-by:
yoavrotems <yoavrotems97@gmail.com>
-
- Aug 12, 2020
-
-
Huang Huang authored
-
Liz Rice authored
* read-only-port defaults are correct * Tests that should catch good read-only-port * Rework checks & tests * Linting on issue template YAML * More explicit test for 4.2.4
-
- Aug 09, 2020
-
-
Huang Huang authored
* Add tests for 1.1.19、1.1.20 and 1.1.21 of cis-1.5 * Avoid division by 0 * Use bitmask instead of lte * Change to use multiple values via `use_multiple_values: true` * Use find in 1.1.20 and 1.1.21
-
- Aug 04, 2020
-
-
Liz Rice authored
* Update default Kubernetes to 1.18 * Add missing mapping * Show pod logs on failure
-
- Jul 21, 2020
-
-
Huang Huang authored
* 4.1.7 of cis-1.5 should not be marked as manual * Making the test posix compliant like #643
-
- Jun 24, 2020
-
-
Huang Huang authored
* Fix invalid JSON output Fixes #622 * Apply suggestions from code review Co-authored-by:
Liz Rice <liz@lizrice.com> * Add tests Co-authored-by:
Liz Rice <liz@lizrice.com>
-
- May 20, 2020
-
-
Huang Huang authored
* Remove unnecessary whitespaces * Fix a typo * Add integration tests for cis 1.3 and cis 1.5 * Change the timeout of integration tests from 600s to 1200s * Avoid repeated codes
-
- Mar 05, 2020
-
-
Liz Rice authored
* Update check.go Added new warn_reason value which gives a brief explanation about why the not scored tests failed * Update common.go Changed when a not scored test fails because it has a wrong syntax audit command or just running something that can't be run the print the failure. but if the test just fails because it doesn't line up with the cis hardening recommendations then print the remediation text. * Update check/check.go fix typo Co-Authored-By:
Liz Rice <liz@lizrice.com> * Update check.go * Update common.go * Update check.go added back os.Exit(1) to exitWithError * Update job-master.data Change some tests output to fit warn reason. (No change to the summary) * Update job-node.data Changed some tests output to fit warn reason. (No change to the summary) * Update job.data Change some tests output to fit warn reason. (No change to the summary) * Update common.go Keep to old way to print manual test output Co-authored-by:
Liz Rice <liz@lizrice.com> Co-authored-by:
Roberto Rojas <robertojrojas@gmail.com>
-
- Feb 18, 2020
-
-
Huang Huang authored
Fixes #582
-
- Feb 12, 2020
-
-
Huang Huang authored
* Fixes issue #574: change the PATH in container And change to use `/usr/local/mount-from-host/bin` as mount path. Fixes #574 * Fix integration tests
-
- Jan 21, 2020
-
-
Roberto Rojas authored
* Adds Diff function: Fixes #559 * changes as per PR review
-
- Jan 09, 2020
-
-
Roberto Rojas authored
* Fixes #552: Improves performance and reliability. Co-Authored-By:
Liz Rice <liz@lizrice.com>
-
- Jan 07, 2020
-
-
Murali Paluru authored
-
- Jan 06, 2020
-
-
James Ward authored
* add yamllint command to travis CI installs and runs a linter across the YAML in the project to ensure consistency in the written YAML. this uses yamllint and the default yamllint config with "truthy" and "line-length" disabled. * run dos2unix on CRLF files * YAMLLINT: remove trailing spaces * YAMLLint: add YAML document start * YAMLLint: too many spaces around bracket * YAMLLint: fix indentation * YAMLLint: remove duplicate key * YAMLLint: newline at end of file * YAMLLint: Too few spaces after comma * YAMLLint: too many spaces after colon
-
- Dec 05, 2019
-
-
Roberto Rojas authored
* Initial commit. * Add master and node config. * Add section 5 of CIS 1.5.1. * Split sections into section files * Fix YAML issues. * adds target translation * adds target translation * adds cis-1.5 mapping * fixed tests * fixes are per PR * fixed intergration test * integration kind test file to appropriate ks8 version * fixed etcd text * fixed README * fixed text * etcd: fixed grep path * etcd: fixes * fixed error message bug * Update README.md Co-Authored-By:
Liz Rice <liz@lizrice.com> * Update README.md Co-Authored-By:
Liz Rice <liz@lizrice.com> * fixes as per PR review
-
- Nov 27, 2019
-
-
Roberto Rojas authored
* Add kubeconfig location of kube-proxy for AKS * Add job for AKS node * Automate ca file permission check * removed job-aks.yaml as other PRs added needed features * fixed integration test due to merge changes
-
- Nov 16, 2019
-
-
Roberto Rojas authored
* Fixes issue #439: Adds integration testing using KIND * try integration tests * started using ticker and timeouts * trying built container image * adds load image into KIND * adds comparison * fixes as per PR review
-