diff options
| author |   Pawel Wieczorek <p.wieczorek2@samsung.com> | 2019-09-17 18:47:43 +0200 |
|---|---|---|
| committer | Pawel Wieczorek <p.wieczorek2@samsung.com> | 2019-09-19 15:14:01 +0200 |
| commit | 2055f0878a7841f7d07eda60eac10034c4b22215 (patch) | |
| tree | 2af33155397d2f067aff531f3e5ae3ec4002707f /test/security/k8s/src/check/cmd | |
| parent | 6c95c5ca28dd3f48a58dc11cc9c17fd8b4934881 (diff) | |
k8s: Validate API server auditing flags
This patch verifies if CIS Kubernetes Benchmark v1.3.0 sections
regarding master node configuration are satisfied (1.1.16 - 1.1.18).
Issue-ID: SECCOM-235
Change-Id: I27b63e37fc3203cf3574b9e1cdc43333041f2a36
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
Diffstat (limited to 'test/security/k8s/src/check/cmd')
| -rw-r--r-- | test/security/k8s/src/check/cmd/check/check.go | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/test/security/k8s/src/check/cmd/check/check.go b/test/security/k8s/src/check/cmd/check/check.go index 23465d66a..7468bc443 100644 --- a/test/security/k8s/src/check/cmd/check/check.go +++ b/test/security/k8s/src/check/cmd/check/check.go @@ -67,4 +67,7 @@ func main() { log.Printf("IsAlwaysAllowAuthorizationModeExcluded: %t\n", master.IsAlwaysAllowAuthorizationModeExcluded(k8sParams)) log.Printf("IsAuditLogPathSet: %t\n", master.IsAuditLogPathSet(k8sParams)) + log.Printf("IsAuditLogMaxAgeValid: %t\n", master.IsAuditLogPathSet(k8sParams)) + log.Printf("IsAuditLogMaxBackupValid: %t\n", master.IsAuditLogPathSet(k8sParams)) + log.Printf("IsAuditLogMaxSizeValid: %t\n", master.IsAuditLogPathSet(k8sParams)) } |