Skip to content
Snippets Groups Projects
  1. Apr 23, 2019
  2. Apr 16, 2019
  3. Apr 11, 2019
  4. Apr 10, 2019
  5. Mar 27, 2019
  6. Mar 26, 2019
  7. Mar 25, 2019
    • yoavrotems's avatar
      Update master.yaml · d059196b
      yoavrotems authored
      Fix 1.1.23 to check *if* --service-account-lookup argument is set and if so then if it's equal to true
      d059196b
    • yoavrotems's avatar
      Update master.yaml · a85e5a77
      yoavrotems authored
      Fix title of 1.4.21 from 644 to 600 according to cis benchmark
      a85e5a77
  8. Mar 18, 2019
  9. Mar 14, 2019
  10. Mar 12, 2019
  11. Mar 07, 2019
  12. Mar 06, 2019
  13. Mar 03, 2019
  14. Mar 02, 2019
  15. Feb 28, 2019
  16. Feb 27, 2019
    • Abubakr-Sadik Nii Nai Davis's avatar
      Add kubeconfig variable substitution for kubelet and proxy. · a88b0703
      Abubakr-Sadik Nii Nai Davis authored
      There are checks for the kubeconfig for both kubelet and proxy which
      the current kube-bench implementation does not check for properly.
      kube-bench checks the wrong files.
      
      This PR adds support for variable substitution for all the config file
      types are that should be checked in the CIS benchmarks.
      
      This PR also fixes a buggy in CIS 1.3.0 check 2.2.9, which checks for
      ownership of the kubelet config file /var/lib/kubelet/config.yaml but
      recommends changing ownership of kubelet kubeconfig file
      /etc/kubernetes/kubelet.conf as remediation.
      a88b0703
Loading