github/kube-bench
1
0
Fork 0
mirror of https://github.com/aquasecurity/kube-bench.git synced 2026-04-15 06:56:51 +00:00
Code Issues Packages Projects Releases Wiki Activity
473 Commits 13 Branches 100 Tags
ff427f8b0c19ea8504f905e017d0fbcd22d400e7
Commit Graph
59 Commits
Author SHA1 Message Date
Liz Rice a800ac6ccc Merge branch 'master' into json-config 2019-04-24 09:29:18 +01:00
Liz Rice ceb44583dd Tidy up a couple of things 2019-04-23 16:07:27 +01:00
Liz Rice f9d0f4acc1 Add OCP info into the README 2019-04-23 11:59:54 +01:00
Liz Rice a613f6f028 Document job for EKS 2019-04-11 19:00:17 +01:00
Liz Rice 902a10f1c7 Just have one path for both json and yaml 2019-04-11 17:09:33 +01:00
Liz Rice c887794807 Merge branch 'master' into feature/json-config 2019-04-11 10:03:07 +01:00
Liz Rice b5f3299e92 Merge branch 'master' into document-output 2019-04-11 09:04:04 +01:00
Liz Rice df556c2f42 Add CIS & Kubernetes version mapping to README 2019-03-27 14:21:22 +00:00
Liz Rice 488f5221ef Document output states 
Also describe how tests can be omitted by editing the YAML
 2019-03-26 10:37:17 +00:00
Florent Delannoy abfc38d672 Update documentation after review 2019-03-21 15:05:20 +00:00
Florent Delannoy 4d3144ca21 Support JSON and YAML configuration 
Support new configuration options besides --flags:
- JSON file through `jsonpath`
- YAML file through `yamlpath`

These new options are fully backwards-compatible with the existing
tests.

Added a new profile, 1.11-json, that expects a JSON kubelet
configuration file and scores accordingly. This profile is compatible
with EKS.
 2019-03-21 12:13:31 +00:00
Cyril Tovena 5baf81a70a Adds master node detection and a root command that automatically detect checks to run. 
The root command will run node checks and if possible master checks.
I've also added some Makefile targets to improve local testing and improve the documentation.
 2019-03-12 19:32:05 -04:00
Liz Rice 79427e185e Merge branch 'master' into patch-1 2019-01-15 11:05:27 +00:00
Liz Rice 6b9ceae9d4 True for Windows too 2019-01-15 11:05:04 +00:00
Spencer Owen 2a9a02f25b warn osx limitation 2019-01-14 10:41:19 -07:00
Liz Rice 8021610e46 For #197 - create job YAML files that mount host volumes as needed 2019-01-11 18:44:13 +00:00
Liz Rice 3a662b3ff6 Merge branch 'master' into doc-kubectl-host-pid 2019-01-02 10:53:04 +00:00
Colin GILLE af7ad90477 Advise the use to mount /etc & /var read only for docker usage 2018-12-31 16:39:31 +01:00
Martin Mosegaard Amdisen ba03d8f64b Document limitation of running with kubectl 
Once the master node recommended check:

1.1.12 Ensure that the admission control plugin DenyEscalatingExec is set

has been followed, it is no longer possible to run kube-bench itself using kubectl.
 2018-12-27 13:10:00 +01:00
Sean Slattery 5ca498cd50 Fix typo on README.md 2018-12-20 11:19:44 -08:00
Liz Rice bdbbe41b69 Also /var 2018-11-20 13:22:36 +00:00
Liz Rice ba9985047c read config files from host /etc 
I don't see how kube-bench can check the permissions on files unless it has access to them on the host, so I think we need to be mounting the /etc directory from the host
 2018-11-20 10:18:06 +00:00
Johannes M. Scheuermann b3b3cb819a Correct readme for 1.11 example 
Signed-off-by: Johannes M. Scheuermann <joh.scheuer@gmail.com>
 2018-11-07 21:51:52 +01:00
noqcks ded5aff482 update README 2018-10-09 18:58:30 -04:00
noqcks e5c05a97f7 updating README with 1.11 updates 2018-10-09 18:56:48 -04:00
Luke Bond 8894b1dc4f Update README.md 
Specify `-t` to get colour in the Docker output.
Added a note about mounting kubectl or kubelet to get the version.
 2018-09-03 23:05:48 +01:00
bvwells cc43fcbb7e Add link to CIS kubernetes benchmark 2018-08-10 20:55:02 +01:00
Will Medlar 6c7422a938 Migrate dependency management to dep 2018-05-16 18:16:41 -05:00
Abubakr-Sadik Nii Nai Davis b4b3ebe99c Add instruction for running kube-bench against a kubernetes cluster. 
#218
 2018-05-15 04:40:41 +00:00
Abubakr-Sadik Nii Nai Davis 609335510a Remove kube-bench --help output. 
It has grown stale and no longer reflects the supported options, and can be misleading (see #127).
 2018-05-15 04:24:33 +00:00
Liz Rice b26b23e573 Script needs to actually install kube-bench & its config! 2018-05-11 15:39:11 +01:00
Liz Rice 7460037528 Add link to releases page 2018-05-11 12:47:04 +01:00
Will Medlar 1cff0c4da1 Clarify that only Linux is supported when installing from container 2018-05-06 14:01:49 -05:00
Will Medlar 0714683371 Modify entrypoint to allow execution of kube-bench as default 2018-05-06 13:57:58 -05:00
Liz Rice cb4bec9120 logo instead of heading 2018-04-20 13:07:49 +01:00
Liz Rice f065893f52 Add logo to readme 2018-04-20 13:05:30 +01:00
clemensw 95769cae83 Update README.md to reflect that the --installation option has been removed. 2018-02-23 17:12:52 +01:00
Liz Rice 1e25e089d0 Minor format update to readme 2018-01-11 16:54:40 +00:00
Lee Briggs 216b1d497a Fix glide install instructions 2018-01-11 08:23:46 -08:00
Lee Briggs 033ab5638c Add glide dependencies 
Also update build from source instructions
 2018-01-09 12:54:18 -08:00
Liz Rice 83e58b86db Update README for Kubernetes 1.8 support 2017-11-01 15:04:25 +00:00
Liz Rice 478e378752 Remove reference to specific benchmark version 
We support multiple versions of the CIS benchmark
 2017-10-26 16:12:36 -04:00
Liz Rice 9a500229a4 Update README for auto-detection of executables and config files 2017-09-04 10:11:34 +01:00
Liz Rice 4e17e3b3d5 Update README.md 2017-08-11 18:24:53 +01:00
Liz Rice 34dd31970a Update README about installation flag 2017-07-20 17:33:21 +01:00
Liz Rice 44136fa080 Add image and commit badges to README 2017-06-22 16:36:50 +01:00
Liz Rice 0c30f24b59 Travis build name got updated so the badges need updating too 2017-06-22 15:51:29 +01:00
jerbia 432651e85f Added test 1.4.11 (#8) 2017-06-21 22:45:50 +03:00
jerbia d3bbf2698e Removed extra '\' sign (#6) 
There was an extra '\' sign in the docker pull command
 2017-06-21 14:46:23 +03:00
Amir Jerbi 9a471ef1a4 Added screenshot 2017-06-20 13:43:03 +03:00