|
| 1 | +--- |
1 | 2 | name: cis-kubernetes-benchmark |
2 | 3 | title: CIS Kubernetes Benchmark Profile |
3 | 4 | maintainer: Kristian Vlaardingerbroek |
4 | 5 | copyright: Schuberg Philis B.V. |
5 | 6 | copyright_email: [email protected] |
6 | 7 | license: Apache-2.0 |
7 | 8 | summary: An InSpec Compliance profile for the CIS Kubernetes Benchmark |
8 | | -version: 1.0.0 |
| 9 | +version: 0.3.1 |
9 | 10 | inspec_version: '>= 2.3.5' |
10 | 11 | supports: |
11 | | - - platform-family: unix |
| 12 | + - platform-family: unix |
12 | 13 | attributes: |
13 | | - - name: cis_level |
14 | | - required: false |
15 | | - description: 'CIS profile level to audit' |
16 | | - value: 2 |
17 | | - type: numeric |
18 | | - - name: apiserver |
19 | | - required: false |
20 | | - description: 'The name of the apiserver process' |
21 | | - type: string |
22 | | - value: kube-apiserver |
23 | | - - name: apiserver-manifest |
24 | | - require: false |
25 | | - description: 'The path of the apiserver manifest' |
26 | | - type: string |
27 | | - value: '/etc/kubernetes/manifests/kube-apiserver.yaml' |
28 | | - - name: controller_manager |
29 | | - required: false |
30 | | - description: 'The name of the controller manager process' |
31 | | - type: string |
32 | | - value: kube-controller-manager |
33 | | - - name: controller_manager-conf |
34 | | - require: false |
35 | | - description: 'The path of the controller-manager.conf file' |
36 | | - type: string |
37 | | - value: '/etc/kubernetes/controller-manager.conf' |
38 | | - - name: controller_manager-manifest |
39 | | - require: false |
40 | | - description: 'The path of the controller manager manifest' |
41 | | - type: string |
42 | | - value: '/etc/kubernetes/manifests/kube-controller-manager.yaml' |
43 | | - - name: scheduler |
44 | | - required: false |
45 | | - description: 'The name of the kube scheduler proces' |
46 | | - type: string |
47 | | - value: kube-scheduler |
48 | | - - name: scheduler-conf |
49 | | - require: false |
50 | | - description: 'The path of the scheduler.conf file' |
51 | | - type: string |
52 | | - value: '/etc/kubernetes/scheduler.conf' |
53 | | - - name: scheduler-manifest |
54 | | - require: false |
55 | | - description: 'The path of the kube scheduler manifest' |
56 | | - type: string |
57 | | - value: '/etc/kubernetes/manifests/kube-scheduler.yaml' |
58 | | - - name: kubelet |
59 | | - required: false |
60 | | - description: 'The name of the kubelet process' |
61 | | - type: string |
62 | | - value: kubelet |
63 | | - - name: kubelet-conf |
64 | | - require: false |
65 | | - description: 'The path of the kubelet.conf file' |
66 | | - type: string |
67 | | - value: '/etc/kubernetes/kubelet.conf' |
68 | | - - name: etcd |
69 | | - required: false |
70 | | - description: 'The name of the etcd process' |
71 | | - type: string |
72 | | - value: /usr/bin/etcd |
73 | | - - name: etcd-manifest |
74 | | - require: false |
75 | | - description: 'The path of the etcd manifest' |
76 | | - type: string |
77 | | - value: '/etc/kubernetes/manifests/etcd.yaml' |
78 | | - - name: admin-conf |
79 | | - require: false |
80 | | - description: 'The path of the admin.conf file' |
81 | | - type: string |
82 | | - value: '/etc/kubernetes/admin.conf' |
83 | | - - name: kubernetes-pki |
84 | | - require: false |
85 | | - description: 'The path of the Kubernetes PKI directory' |
86 | | - type: string |
87 | | - value: '/etc/kubernetes/pki' |
| 14 | + - name: cis_level |
| 15 | + required: false |
| 16 | + description: 'CIS profile level to audit' |
| 17 | + value: 2 |
| 18 | + type: numeric |
| 19 | + - name: apiserver |
| 20 | + required: false |
| 21 | + description: 'The name of the apiserver process' |
| 22 | + type: string |
| 23 | + value: kube-apiserver |
| 24 | + - name: apiserver-manifest |
| 25 | + require: false |
| 26 | + description: 'The path of the apiserver manifest' |
| 27 | + type: string |
| 28 | + value: '/etc/kubernetes/manifests/kube-apiserver.yaml' |
| 29 | + - name: controller_manager |
| 30 | + required: false |
| 31 | + description: 'The name of the controller manager process' |
| 32 | + type: string |
| 33 | + value: kube-controller-manager |
| 34 | + - name: controller_manager-conf |
| 35 | + require: false |
| 36 | + description: 'The path of the controller-manager.conf file' |
| 37 | + type: string |
| 38 | + value: '/etc/kubernetes/controller-manager.conf' |
| 39 | + - name: controller_manager-manifest |
| 40 | + require: false |
| 41 | + description: 'The path of the controller manager manifest' |
| 42 | + type: string |
| 43 | + value: '/etc/kubernetes/manifests/kube-controller-manager.yaml' |
| 44 | + - name: scheduler |
| 45 | + required: false |
| 46 | + description: 'The name of the kube scheduler proces' |
| 47 | + type: string |
| 48 | + value: kube-scheduler |
| 49 | + - name: scheduler-conf |
| 50 | + require: false |
| 51 | + description: 'The path of the scheduler.conf file' |
| 52 | + type: string |
| 53 | + value: '/etc/kubernetes/scheduler.conf' |
| 54 | + - name: scheduler-manifest |
| 55 | + require: false |
| 56 | + description: 'The path of the kube scheduler manifest' |
| 57 | + type: string |
| 58 | + value: '/etc/kubernetes/manifests/kube-scheduler.yaml' |
| 59 | + - name: kubelet |
| 60 | + required: false |
| 61 | + description: 'The name of the kubelet process' |
| 62 | + type: string |
| 63 | + value: kubelet |
| 64 | + - name: kubelet-conf |
| 65 | + require: false |
| 66 | + description: 'The path of the kubelet.conf file' |
| 67 | + type: string |
| 68 | + value: '/etc/kubernetes/kubelet.conf' |
| 69 | + - name: etcd |
| 70 | + required: false |
| 71 | + description: 'The name of the etcd process' |
| 72 | + type: string |
| 73 | + value: /usr/bin/etcd |
| 74 | + - name: etcd-manifest |
| 75 | + require: false |
| 76 | + description: 'The path of the etcd manifest' |
| 77 | + type: string |
| 78 | + value: '/etc/kubernetes/manifests/etcd.yaml' |
| 79 | + - name: admin-conf |
| 80 | + require: false |
| 81 | + description: 'The path of the admin.conf file' |
| 82 | + type: string |
| 83 | + value: '/etc/kubernetes/admin.conf' |
| 84 | + - name: kubernetes-pki |
| 85 | + require: false |
| 86 | + description: 'The path of the Kubernetes PKI directory' |
| 87 | + type: string |
| 88 | + value: '/etc/kubernetes/pki' |
0 commit comments