- Apr 23, 2019
- Apr 16, 2019
-
-
yoavrotems authored
-
- Apr 11, 2019
- Apr 10, 2019
-
-
Abubakr-Sadik Nii Nai Davis authored
This is useful for checking values in YAML (possibly JSON) kubernetes config files.
-
Liz Rice authored
-
Liz Rice authored
-
- Mar 27, 2019
- Mar 26, 2019
- Mar 25, 2019
-
-
yoavrotems authored
Fix 1.1.23 to check *if* --service-account-lookup argument is set and if so then if it's equal to true
-
yoavrotems authored
Fix title of 1.4.21 from 644 to 600 according to cis benchmark
-
- Mar 18, 2019
-
-
Liz Rice authored
Adds master node detection - thanks @Kuqd!
-
- Mar 14, 2019
-
-
Liz Rice authored
-
- Mar 12, 2019
-
-
Cyril Tovena authored
The root command will run node checks and if possible master checks. I've also added some Makefile targets to improve local testing and improve the documentation.
-
- Mar 07, 2019
- Mar 06, 2019
-
-
Liz Rice authored
add new config files from the new CIS Kubernetes Benchmark
-
Abubakr-Sadik Nii Nai Davis authored
The OCP benchmarks uses configs for only binary component variable names. This commit cleans up the OCP config by removing all configuration except those component binaries required to run kube-bench on OCP installations and adds missing ones.
-
yoavrotems authored
Fix the start from 1.11 to 1.13 and adding changes from pull #227, and pull #228.
-
yoavrotems authored
replace with the new node.yaml file
-
yoavrotems authored
replace with the new master.yaml file
-
yoavrotems authored
replace with the new config.yaml file
-
yoavrotems authored
-
- Mar 03, 2019
- Mar 02, 2019
-
-
Abubakr-Sadik Nii Nai Davis authored
-
- Feb 28, 2019
- Feb 27, 2019
-
-
Abubakr-Sadik Nii Nai Davis authored
There are checks for the kubeconfig for both kubelet and proxy which the current kube-bench implementation does not check for properly. kube-bench checks the wrong files. This PR adds support for variable substitution for all the config file types are that should be checked in the CIS benchmarks. This PR also fixes a buggy in CIS 1.3.0 check 2.2.9, which checks for ownership of the kubelet config file /var/lib/kubelet/config.yaml but recommends changing ownership of kubelet kubeconfig file /etc/kubernetes/kubelet.conf as remediation.
-