Skip to content
Snippets Groups Projects
  1. Apr 11, 2019
  2. Apr 10, 2019
  3. Mar 27, 2019
  4. Mar 26, 2019
  5. Mar 25, 2019
    • yoavrotems's avatar
      Update master.yaml · d059196b
      yoavrotems authored
      Fix 1.1.23 to check *if* --service-account-lookup argument is set and if so then if it's equal to true
      d059196b
    • yoavrotems's avatar
      Update master.yaml · a85e5a77
      yoavrotems authored
      Fix title of 1.4.21 from 644 to 600 according to cis benchmark
      a85e5a77
  6. Mar 21, 2019
    • Florent Delannoy's avatar
      Update documentation after review · abfc38d6
      Florent Delannoy authored
      abfc38d6
    • Florent Delannoy's avatar
      Support JSON and YAML configuration · 4d3144ca
      Florent Delannoy authored
      Support new configuration options besides --flags:
      - JSON file through `jsonpath`
      - YAML file through `yamlpath`
      
      These new options are fully backwards-compatible with the existing
      tests.
      
      Added a new profile, 1.11-json, that expects a JSON kubelet
      configuration file and scores accordingly. This profile is compatible
      with EKS.
      4d3144ca
  7. Mar 18, 2019
  8. Mar 14, 2019
  9. Mar 12, 2019
  10. Mar 07, 2019
  11. Mar 06, 2019
  12. Mar 03, 2019
  13. Mar 02, 2019
  14. Feb 28, 2019
  15. Feb 27, 2019
    • Abubakr-Sadik Nii Nai Davis's avatar
      Add kubeconfig variable substitution for kubelet and proxy. · a88b0703
      Abubakr-Sadik Nii Nai Davis authored
      There are checks for the kubeconfig for both kubelet and proxy which
      the current kube-bench implementation does not check for properly.
      kube-bench checks the wrong files.
      
      This PR adds support for variable substitution for all the config file
      types are that should be checked in the CIS benchmarks.
      
      This PR also fixes a buggy in CIS 1.3.0 check 2.2.9, which checks for
      ownership of the kubelet config file /var/lib/kubelet/config.yaml but
      recommends changing ownership of kubelet kubeconfig file
      /etc/kubernetes/kubelet.conf as remediation.
      a88b0703
Loading