Jay Taylor's notes
back to listing indexneuvector/kubernetes-cis-benchmark
[web search]
Original source (github.com)
Clipped on: 2018-04-05
A set of scripts inspired by CIS Kubernetes Benchmark that checks best-practices of Kubernetes installations
Shell
Latest commit
6078590
on Feb 9
1.6 | update header | 6 months ago | |
1.8 | Improve kube-controller-manager finding. | 2 months ago | |
LICENSE | Initial commit | 10 months ago | |
README.md | split the benchmark into 1.6 and 1.8 | 6 months ago | |
bench.png | Initial commit | 10 months ago | |
federation.sh | update header | 6 months ago | |
helper.sh | split the benchmark into 1.6 and 1.8 | 6 months ago | |
master.sh | update header | 6 months ago | |
worker.sh | update header | 6 months ago |
README.md
CIS Kubernetes Benchmark
This set of scripts can be used to check the Kubernetes installation against the best-practices. CIS Kubernetes Benchmark 1.6 and 1.8 are implemented.
These scripts are devided into the set to run on the Kubernetes master nodes, worker nodes and federation nodes.
For the Kubernetes version 1.8, you can use CIS Kubernetes Benchmark 1.8.
On the Kubernetes 1.8 master nodes,
$ ./master.sh 1.8
On the Kubernetes 1.8 worker nodes,
$ ./worker.sh 1.8
On the Kubernetes 1.8 federation nodes,
$ ./federation.sh 1.8
For the Kubernetes version other than 1.8, you can use CIS Kubernetes Benchmark 1.6.
On the Kubernetes 1.6 master nodes,
$ ./master.sh 1.6
On the Kubernetes 1.6 worker nodes,
$ ./worker.sh 1.6
On the Kubernetes 1.6 federation nodes,
$ ./federation.sh 1.6
Press h to open a hovercard with more details.