From 6b8384b57a0bfc200c15ed9ded71544c33a27e81 Mon Sep 17 00:00:00 2001 From: Cédric Ollivier Date: Fri, 14 Aug 2020 11:32:07 +0200 Subject: Pin latest versions from security tools MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit It selects kube-bench and kube-hunter 0.3.1. Change-Id: Icb85f3d0d88056370500ec827ef77c215740e5e4 Signed-off-by: Cédric Ollivier --- functest_kubernetes/security/kube-bench.yaml | 2 +- functest_kubernetes/security/kube-hunter.yaml | 3 ++- 2 files changed, 3 insertions(+), 2 deletions(-) diff --git a/functest_kubernetes/security/kube-bench.yaml b/functest_kubernetes/security/kube-bench.yaml index ec42ba16..38a2ef60 100644 --- a/functest_kubernetes/security/kube-bench.yaml +++ b/functest_kubernetes/security/kube-bench.yaml @@ -12,7 +12,7 @@ spec: hostPID: true containers: - name: kube-bench - image: aquasec/kube-bench:latest + image: aquasec/kube-bench:0.3.1 command: ["kube-bench"] volumeMounts: - name: var-lib-etcd diff --git a/functest_kubernetes/security/kube-hunter.yaml b/functest_kubernetes/security/kube-hunter.yaml index ce88c062..b4452a57 100644 --- a/functest_kubernetes/security/kube-hunter.yaml +++ b/functest_kubernetes/security/kube-hunter.yaml @@ -1,3 +1,4 @@ +--- apiVersion: batch/v1 kind: Job metadata: @@ -7,7 +8,7 @@ spec: spec: containers: - name: kube-hunter - image: aquasec/kube-hunter + image: aquasec/kube-hunter:0.3.1 command: ["python", "kube-hunter.py"] args: ["--pod"] restartPolicy: Never -- cgit