diff options
| author |   Cédric Ollivier <cedric.ollivier@orange.com> | 2020-09-13 14:53:26 +0200 |
|---|---|---|
| committer | Cédric Ollivier <cedric.ollivier@orange.com> | 2020-09-13 14:58:47 +0200 |
| commit | bced94b6fe24c7e939fb22834deb77477e4a9bb9 (patch) | |
| tree | 5d36140197daa7e2b8d6d3280f8653bfe380e6a9 /functest_kubernetes/security/kube-bench.yaml | |
| parent | b866c73d70079fdb52e5fc999f49a32d2af82349 (diff) | |
Split kube-bench master and node
The former deployment asked for all-in-one.
Change-Id: I12e470cec9e82b82c6f3ea5ff2431087f5deb9be
Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
Diffstat (limited to 'functest_kubernetes/security/kube-bench.yaml')
| -rw-r--r-- | functest_kubernetes/security/kube-bench.yaml | 52 |
1 files changed, 0 insertions, 52 deletions
diff --git a/functest_kubernetes/security/kube-bench.yaml b/functest_kubernetes/security/kube-bench.yaml deleted file mode 100644 index 2f2c57d6..00000000 --- a/functest_kubernetes/security/kube-bench.yaml +++ /dev/null @@ -1,52 +0,0 @@ ---- -apiVersion: batch/v1 -kind: Job -metadata: - name: kube-bench -spec: - template: - metadata: - labels: - app: kube-bench - spec: - hostPID: true - containers: - - name: kube-bench - image: aquasec/kube-bench:0.3.1 - command: ["kube-bench"] - args: ["--json"] - volumeMounts: - - name: var-lib-etcd - mountPath: /var/lib/etcd - readOnly: true - - name: var-lib-kubelet - mountPath: /var/lib/kubelet - readOnly: true - - name: etc-systemd - mountPath: /etc/systemd - readOnly: true - - name: etc-kubernetes - mountPath: /etc/kubernetes - readOnly: true - # /usr/local/mount-from-host/bin is mounted to access kubectl / kubelet, for auto-detecting the Kubernetes version. - # You can omit this mount if you specify --version as part of the command. - - name: usr-bin - mountPath: /usr/local/mount-from-host/bin - readOnly: true - restartPolicy: Never - volumes: - - name: var-lib-etcd - hostPath: - path: "/var/lib/etcd" - - name: var-lib-kubelet - hostPath: - path: "/var/lib/kubelet" - - name: etc-systemd - hostPath: - path: "/etc/systemd" - - name: etc-kubernetes - hostPath: - path: "/etc/kubernetes" - - name: usr-bin - hostPath: - path: "/usr/bin" |