Corrected file name in K3s 4.2.3

Signed-off-by: Derek Nola <[email protected]>
dereknola · Aug 5, 2024 · aa55188 · aa55188
1 parent e797e60
commit aa55188
Show file tree

Hide file tree

Showing 6 changed files with 6 additions and 6 deletions.
diff --git a/package/cfg/k3s-cis-1.24-hardened/node.yaml b/package/cfg/k3s-cis-1.24-hardened/node.yaml
@@ -209,7 +209,7 @@ groups:
               set: true
         remediation: |
           By default, K3s automatically provides the client ca certificate for the Kubelet.
-          It is generated and located at /var/lib/rancher/k3s/server/tls/client-ca.crt
+          It is generated and located at /var/lib/rancher/k3s/agent/client-ca.crt
         scored: true
 
       - id: 4.2.4

diff --git a/package/cfg/k3s-cis-1.24-permissive/node.yaml b/package/cfg/k3s-cis-1.24-permissive/node.yaml
@@ -209,7 +209,7 @@ groups:
               set: true
         remediation: |
           By default, K3s automatically provides the client ca certificate for the Kubelet.
-          It is generated and located at /var/lib/rancher/k3s/server/tls/client-ca.crt
+          It is generated and located at /var/lib/rancher/k3s/agent/client-ca.crt
         scored: true
 
       - id: 4.2.4

diff --git a/package/cfg/k3s-cis-1.7-hardened/node.yaml b/package/cfg/k3s-cis-1.7-hardened/node.yaml
@@ -206,7 +206,7 @@ groups:
               path: '{.authentication.x509.clientCAFile}'
         remediation: |
           By default, K3s automatically provides the client ca certificate for the Kubelet.
-          It is generated and located at /var/lib/rancher/k3s/server/tls/client-ca.crt
+          It is generated and located at /var/lib/rancher/k3s/agent/client-ca.crt
         scored: true
 
       - id: 4.2.4

diff --git a/package/cfg/k3s-cis-1.7-permissive/node.yaml b/package/cfg/k3s-cis-1.7-permissive/node.yaml
@@ -206,7 +206,7 @@ groups:
               path: '{.authentication.x509.clientCAFile}'
         remediation: |
           By default, K3s automatically provides the client ca certificate for the Kubelet.
-          It is generated and located at /var/lib/rancher/k3s/server/tls/client-ca.crt
+          It is generated and located at /var/lib/rancher/k3s/agent/client-ca.crt
         scored: true
 
       - id: 4.2.4

diff --git a/package/cfg/k3s-cis-1.8-hardened/node.yaml b/package/cfg/k3s-cis-1.8-hardened/node.yaml
@@ -202,7 +202,7 @@ groups:
               path: '{.authentication.x509.clientCAFile}'
         remediation: |
           By default, K3s automatically provides the client ca certificate for the Kubelet.
-          It is generated and located at /var/lib/rancher/k3s/server/tls/client-ca.crt
+          It is generated and located at /var/lib/rancher/k3s/agent/client-ca.crt
         scored: true
 
       - id: 4.2.4

diff --git a/package/cfg/k3s-cis-1.8-permissive/node.yaml b/package/cfg/k3s-cis-1.8-permissive/node.yaml
@@ -201,7 +201,7 @@ groups:
               path: '{.authentication.x509.clientCAFile}'
         remediation: |
           By default, K3s automatically provides the client ca certificate for the Kubelet.
-          It is generated and located at /var/lib/rancher/k3s/server/tls/client-ca.crt
+          It is generated and located at /var/lib/rancher/k3s/agent/client-ca.crt
         scored: true
 
       - id: 4.2.4