kube-bench

kube-bench copied to clipboard

#833 Adding tests to support DoD STIG Ver 1 Rel 6

crenzoaws

fix kube-bench/cfg/cis-1.6/master.yaml 1.2.26

1

Add test to 1.2.26 to check that --request-timeout parameter is configured.

jonipatr

kube-bench/cfg/cis-1.6/master.yaml 1.2.26 cannot pass

2

**Overview** 1.2.26 Ensure that the --request-timeout argument is set The test is scored but there is no test added after initial grepping. **What happened?** Test always returns: `[WARN] 1.2.26 Ensure...

jonipatr

Bumps [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go) from 1.44.71 to 1.44.77. Release notes Sourced from github.com/aws/aws-sdk-go's releases. Release v1.44.77 (2022-08-15) Service Client Updates service/cloudfront: Updates service API and documentation Adds Http 3 support to distributions...

dependabot[bot]

Bumps [gorm.io/driver/postgres](https://github.com/go-gorm/postgres) from 1.3.8 to 1.3.9. Commits dedd1d2 feat: custom type implements autoIncrement (#121) bfee27c feat: gorm.Index was intruduced in v1.23.7 of gorm.io/gorm (#118) See full diff in compare view...

dependabot[bot]

cfg/cis-1.6's 4.2.1 get a false negative result

3

**Overview** if kubelet run only with cmd parameter `--anonymous-auth=false` and cannot find configuration file in server, cis-1.6-4.2.1 rule will get a false negative result **How did you run kube-bench?** ```bash...

tarihub

Docker image creation with non-root account

4

This is to resolve issue #938 with the Dockerfile updates.

sosadtsia

**Overview** While running the kube-bench on k3s cluster it only performs"4. Worker Node Security Configuration" and "5. Kubernetes Policies" checks. **How did you run kube-bench?** 1. Created the job.yaml from...

muddassir-r

Closes #1205

mozillazg

etcd data-dir ownership check fails if etcd user is not listed in /etc/passwd mounted from host

2

**Overview** The [etcd data directory ownership check](https://github.com/aquasecurity/kube-bench/blob/main/cfg/cis-1.23/master.yaml#L164) fails even though the data directory is owned by `etcd:etcd` **How did you run kube-bench?** ```bash $ git clone [email protected]:aquasecurity/kube-bench.git && cd kube-bench...

m1ghtym0