Check PodSecurityPolicy when test 1.2.13 of cis-1.5 (#651)

2026-04-15 06:56:51 +00:00 · 2020-08-03 10:38:22 +03:00
parent db109daf43
commit 5ff32e55eb
1 changed files with 6 additions and 0 deletions
@@ -520,12 +520,18 @@ groups:
        text: "Ensure that the admission control plugin SecurityContextDeny is set if PodSecurityPolicy is not used (Not Scored)"
        audit: "/bin/ps -ef | grep $apiserverbin | grep -v grep"
        tests:
+          bin_op: or
          test_items:
            - flag: "--enable-admission-plugins"
              compare:
                op: has
                value: "SecurityContextDeny"
              set: true
+            - flag: "--enable-admission-plugins"
+              compare:
+                op: has
+                value: "PodSecurityPolicy"
+              set: true
        remediation: |
          Edit the API server pod specification file $apiserverconf
          on the master node and set the --enable-admission-plugins parameter to include