kube-bench
kube-bench copied to clipboard
mount /etc/passwd and /etc/group for etcd ownership related checks
trafficstars
Changes to job-master.yaml are also needed in job.yaml to properly check ownership of etcd data dir
Issue: https://github.com/aquasecurity/kube-bench/issues/1275
Related to issue: https://github.com/aquasecurity/kube-bench/issues/842 fix the same as in https://github.com/aquasecurity/kube-bench/pull/868
In most cases the job that was created via job.yaml will not be running on the master node. IMHO, mount /etc/passwd and /etc/group from worker node is not necessary.