Merge pull request aquasecurity#226 from aquasecurity/add-new-cfg-ver…

…sion1.4 add new config files from the new CIS Kubernetes Benchmark
pipo02mix · Mar 6, 2019 · 772d2e2 · 772d2e2
2 parents 2d4019a + c6102f0
commit 772d2e2
Show file tree

Hide file tree

Showing 3 changed files with 2,009 additions and 0 deletions.
diff --git a/cfg/1.13/config.yaml b/cfg/1.13/config.yaml
@@ -0,0 +1,29 @@
+---
+## Controls Files.
+# These are YAML files that hold all the details for running checks.
+#
+## Uncomment to use different control file paths.
+# masterControls: ./cfg/master.yaml
+# nodeControls: ./cfg/node.yaml
+# federatedControls: ./cfg/federated.yaml
+
+master:
+  apiserver:
+    defaultconf: /etc/kubernetes/manifests/kube-apiserver.yaml
+
+  scheduler:
+    defaultconf: /etc/kubernetes/manifests/kube-scheduler.yaml
+
+  controllermanager:
+    defaultconf: /etc/kubernetes/manifests/kube-controller-manager.yaml
+
+  etcd:
+    defaultconf: /etc/kubernetes/manifests/etcd.yaml
+
+node:
+  kubelet:
+    defaultconf: /etc/kubernetes/kubelet.conf
+    defaultsvc: /etc/systemd/system/kubelet.service.d/10-kubeadm.conf
+
+  proxy:
+    defaultconf: /etc/kubernetes/addons/kube-proxy-daemonset.yaml