rancher
rancher copied to clipboard
[CIS] user application with binary name etcdkeeper interfere with CIS Scans
Rancher 2.7.10. CIS benchmark 4.2.0.
Describe the bug
User application with binary name etcdkeeper
interfere with CIS Scans.
To Reproduce
Create a sample workload with a binary name etcdkeeper
and deploy it in the cluster.
Result CIS scan reports Mixed Fail:
1.1.7 Ensure that the etcd pod specification file permissions are set to 644 or more restrictive (Automated) 1.1.8 Ensure that the etcd pod specification file ownership is set to root:root (Automated) 1.1.11 Ensure that the etcd data directory permissions are set to 700 or more restrictive (Automated) 2.7 Ensure that a unique Certificate Authority is used for etcd (Automated)
Expected Result
Do not detect binary name etcdkeeper
as a etcd
binary.
rancher/issues/26598