Kube-bench support for kubeadm testing

[lizrice]

trafficstars

See discussion started under issue #56. It would be great to use kube-bench as part of kubeadm testing to ensure sensible defaults.

[lizrice]

Tagging @luxas who had the original idea :-)

[luxas]

Could you test to run kube-bench against a kubeadm cluster and post the results here? I might be able to do it as well, but will be delayed a some weeks or so in that case :(

After we have the inital report for v1.8, we can see how both kube-bench and kubeadm can be improved. Eventually, as a consequence of that work, we can start automatically enforcing these test results in automated e2e tests.

Cheers, thanks for the great project!

[jaxxstorm]

@luxas just as an FYI, I'm working on securing a cluster using kube-bench and generating a kubeadm configuration file using jsonnet. The project is here: https://github.com/apptio/kubeadm-bootstrap/issues/4

The complete configuration file will be here: https://github.com/apptio/kubeadm-bootstrap/blob/master/lib/kubeadm.libsonnet

This might help in future.

[robertojrojas]

Hey @jaxxstorm @luxas are you guys still looking into this?

[luxas]

I'm not, I've stepped down from kubeadm day-to-day development.