Skip to content
Snippets Groups Projects
  1. Oct 14, 2019
  2. Jul 13, 2019
  3. Jul 10, 2019
  4. Jul 08, 2019
  5. Jul 01, 2019
  6. May 17, 2019
  7. May 01, 2019
  8. Mar 12, 2019
  9. Feb 27, 2019
    • Abubakr-Sadik Nii Nai Davis's avatar
      Add kubeconfig variable substitution for kubelet and proxy. · a88b0703
      Abubakr-Sadik Nii Nai Davis authored
      There are checks for the kubeconfig for both kubelet and proxy which
      the current kube-bench implementation does not check for properly.
      kube-bench checks the wrong files.
      
      This PR adds support for variable substitution for all the config file
      types are that should be checked in the CIS benchmarks.
      
      This PR also fixes a buggy in CIS 1.3.0 check 2.2.9, which checks for
      ownership of the kubelet config file /var/lib/kubelet/config.yaml but
      recommends changing ownership of kubelet kubeconfig file
      /etc/kubernetes/kubelet.conf as remediation.
      a88b0703
  10. Feb 19, 2019
  11. Oct 23, 2018
    • Abubakr-Sadik Nii Nai Davis's avatar
      Add getServiceFiles function. · ed218394
      Abubakr-Sadik Nii Nai Davis authored
      The CIS benchmark check for node checks 2 config files for kubelet:
        - kubelet config file (kubelet.conf)
        - kubelet systemd unitfile (10-kubeadm.conf)
      
      The getServiceFiles function gets candidates for kubelet systemd
      unitfile and returns valid untifiles.
      ed218394
  12. Jul 26, 2018
  13. Jun 29, 2018
  14. May 11, 2018
    • Jeppe Fihl-Pearson's avatar
      Add tip about the `--version` flag to error output · 39d94df8
      Jeppe Fihl-Pearson authored
      If people are trying to use the Docker image to check their cluster, there's a
      big likelyhood of them hitting the error message saying that either `kubectl`
      or `kubelet` need to be found in order for `kube-bench` to be able to determine
      the Kubernetes version in use.
      
      This adds a tip that the version can be specified manually with the `--version`
      flag which is a lot easier than having to make a new Docker image with the
      right version of `kubelet`/`kubectl` in order for `kube-bench` to work.
      39d94df8
  15. Mar 23, 2018
  16. Jan 11, 2018
  17. Nov 28, 2017
  18. Nov 21, 2017
  19. Nov 14, 2017
  20. Nov 13, 2017
  21. Nov 03, 2017
  22. Oct 24, 2017
  23. Oct 15, 2017
  24. Sep 26, 2017
  25. Sep 17, 2017
  26. Aug 31, 2017
  27. Aug 30, 2017
  28. Aug 15, 2017
Loading