kube-bench

kube-bench copied to clipboard

Add constraints to groups and test_item.

3

Add the constraints functionality as we have in bench-common, to a single test in "test_item" and the entire group as well.

yoavrotems

Etcd check failed with a custom etcd setup

2

**Overview** We have a custom Etcd cluster that setup with systemd and bash scripts. We can't pass the 'Etcd Node Configuration' check. **Environment** Kubernetes v1.18.6 Kube-bench: v0.5.0 **Running processes** ```bash...

RolandMa1986

After [Add new statuses](#916) kube-bench will have 7 different statuses [PASS] [FAIL] [WARN] [INFO] [MANU] [SKIP] [ERRO] It only make sense to have a new output manipulation flag --status which...

yoavrotems

feature request: support S3 destination for `--outputfile` option

7

Hello there, I'd like to run kube-bench regularly and have the reports made available on a S3 compatible storage (minio). Do you have this feature in your roadmap ?

rrey

At the moment the config.yaml file has a `confs` section with a series of candidate file names and locations for the pod configuration for each component. If these components are...

lizrice

Test 1.1.7 (etcd spec file permissions) Fail Because ETCD is on separate server.

1

The file `/etc/kubernetes/manifests/etcd.yaml` does not exist on my master node because `etcd` is running on a separate server. I don't know the correct way to determine this situation but my...

medined

[feature]: Support test override files

2

Thanks for this tool! We at AWS have a change we’d like to suggest and would love community input and participation in implementing this. The CIS Kubernetes Benchmark is a...

micahhausler

Kube-bench support for kubeadm testing

5

See discussion started under issue #56. It would be great to use kube-bench as part of kubeadm testing to ensure sensible defaults.

lizrice

Support for Rancher 2.2 hardening guide

2

We could add support for the Rancher 2.2.x hardening guide. This would require a set of test files under a new `cfg/rancher-2.2` directory.

lizrice

We have a bunch of audit tools like kube-bench and docker-bench that uses common utilities so bench-common holds these commonalities so improvemnts are in a single location

ttousai