Skip to content

Commit

Permalink
update the yaml according (#410)
Browse files Browse the repository at this point in the history
The update is from the new cis version 1.4.1.
like been done in #370
  • Loading branch information
yoavrotems authored and lizrice committed Sep 2, 2019
1 parent ec3b107 commit ea9089b
Showing 1 changed file with 3 additions and 2 deletions.
5 changes: 3 additions & 2 deletions cfg/1.13-json/node.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -226,11 +226,12 @@ groups:
scored: true

- id: 2.1.11
text: "Ensure that the --cadvisor-port argument is set to 0 (Scored)"
text: "[DEPRECATED] Ensure that the --cadvisor-port argument is set to 0"
# This is one of those properties that can only be set as a command line argument.
# To check if the property is set as expected, we need to parse the kubelet command
# instead reading the Kubelet Configuration file.
audit: "ps -fC $kubeletbin"
type: skip
tests:
bin_op: or
test_items:
Expand All @@ -248,7 +249,7 @@ groups:
Based on your system, restart the kubelet service. For example:
systemctl daemon-reload
systemctl restart kubelet.service
scored: true
scored: false

- id: 2.1.12
text: "Ensure that the --rotate-certificates argument is not set to false (Scored)"
Expand Down

0 comments on commit ea9089b

Please sign in to comment.