diff options
| author |   Pawel Wieczorek <p.wieczorek2@samsung.com> | 2019-09-27 16:26:39 +0200 |
|---|---|---|
| committer | Pawel Wieczorek <p.wieczorek2@samsung.com> | 2019-09-27 18:06:10 +0200 |
| commit | 744f732b177c2449ab3ac2ee0ed8fa316122f393 (patch) | |
| tree | 7673407d9db9be58c0fcdfa0c890aabf9a838e8a /test/security/k8s/src/check/validators/master/master.go | |
| parent | 96f4e2fe0ef3bfaf8371f29562ecb6129f20e3ab (diff) | |
k8s: Validate scheduler flags
Issue-ID: SECCOM-235
Change-Id: I61df142e99a7f1da335471acab88e5a47d72df15
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
Diffstat (limited to 'test/security/k8s/src/check/validators/master/master.go')
| -rw-r--r-- | test/security/k8s/src/check/validators/master/master.go | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/test/security/k8s/src/check/validators/master/master.go b/test/security/k8s/src/check/validators/master/master.go index ff3b79648..bc019a67a 100644 --- a/test/security/k8s/src/check/validators/master/master.go +++ b/test/security/k8s/src/check/validators/master/master.go @@ -4,6 +4,7 @@ import ( "log" "check/validators/master/api" + "check/validators/master/scheduler" ) // CheckAPI validates API server complies with CIS guideliness. @@ -56,3 +57,10 @@ func CheckAPI(params []string) { log.Printf("IsStrongCryptoCipherInUse: %t\n", api.IsStrongCryptoCipherInUse(params)) } + +// CheckScheduler validates scheduler complies with CIS guideliness. +func CheckScheduler(params []string) { + log.Println("==> Scheduler:") + log.Printf("IsProfilingDisabled: %t\n", scheduler.IsProfilingDisabled(params)) + log.Printf("IsInsecureBindAddressAbsentOrLoopback: %t\n", scheduler.IsInsecureBindAddressAbsentOrLoopback(params)) +} |