/usr/local/bin/kube_worker_ocp_4_3.tmpl

# ------------------------------------------------------------------------------
# Kubernetes CIS benchmark
#
# NeuVector, Inc. (c) 2020-
#
# NeuVector delivers an application and network intelligent container security
# solution that automatically adapts to protect running containers. Don’t let
# security concerns slow down your CI/CD processes.
# ------------------------------------------------------------------------------

[INFO] 4.1 - Worker Node Configuration Files
[INFO][Level 1][Scored] 4.1.1  - Ensure that the kubelet service file permissions are set to 644 or more restrictive (Scored)
[INFO]      * The kubelet service file not found
[INFO][Level 1][Scored] 4.1.2  - Ensure that the kubelet service file ownership is set to root:root (Scored)
[INFO][Level 1][Scored] 4.1.5  - Ensure that the kubelet.conf file permissions are set to 644 or more restrictive (Scored)
[INFO]      * File not found
[INFO][Level 1][Scored] 4.1.6  - Ensure that the kubelet.conf file ownership is set to root:root (Scored)
[INFO][Level 1][Scored] 4.1.7  - Ensure that the certificate authorities file permissions are set to 644 or more restrictive (Scored)
[INFO]      * File not found
[INFO][Level 1][Scored] 4.1.8  - Ensure that the client certificate authorities file ownership is set to root:root (Scored)
[INFO][Level 1][Scored] 4.1.9  - Ensure that the kubelet configuration file has permissions set to 644 or more restrictive (Scored)
[INFO]      * File not found
[INFO][Level 1][Scored] 4.1.10  - Ensure that the kubelet configuration file ownership is set to root:root (Scored)
[INFO] 4.2 - Kubelet
grep: <<<.Replace_configPrefix_path>>>/etc/kubernetes/kubelet.conf: No such file or directory
grep: <<<.Replace_configPrefix_path>>>/etc/kubernetes/kubelet.conf: No such file or directory
[WARN][Level 1][Scored] 4.2.1  - Ensure that the anonymous-auth argument is set to false (Scored)
grep: <<<.Replace_configPrefix_path>>>/etc/kubernetes/kubelet.conf: No such file or directory
[PASS][Level 1][Scored] 4.2.2  - Ensure that the --authorization-mode argument is not set to AlwaysAllow (Scored)
grep: <<<.Replace_configPrefix_path>>>/etc/kubernetes/kubelet.conf: No such file or directory
[WARN][Level 1][Scored] 4.2.3  - Ensure that the --client-ca-file argument is set as appropriate (Scored)
grep: <<<.Replace_configPrefix_path>>>/etc/kubernetes/kubelet.conf: No such file or directory
[PASS][Level 1][Scored] 4.2.4  - Ensure that the --read-only-port argument is set to 0 (Scored)
grep: <<<.Replace_configPrefix_path>>>/etc/kubernetes/kubelet.conf: No such file or directory
[PASS][Level 1][Scored] 4.2.5  - Ensure that the --streaming-connection-idle-timeout argument is not set to 0 (Scored)
grep: <<<.Replace_configPrefix_path>>>/etc/kubernetes/kubelet.conf: No such file or directory
[PASS][Level 1][Scored] 4.2.7  - Ensure that the --make-iptables-util-chains argument is set to true (Scored)
[INFO][Level 2][Not Scored] 4.2.9  - Ensure that the --event-qps argument is set to 0 or a level which ensures appropriate event capture (Not Scored)
grep: <<<.Replace_configPrefix_path>>>/etc/kubernetes/kubelet.conf: No such file or directory
grep: <<<.Replace_configPrefix_path>>>/etc/kubernetes/kubelet.conf: No such file or directory
[PASS][Level 1][Scored] 4.2.10  - Ensure that the --tls-cert-file and --tls-private-key-file arguments are set as appropriate (Scored)
grep: <<<.Replace_configPrefix_path>>>/etc/kubernetes/kubelet.conf: No such file or directory
[PASS][Level 1][Scored] 4.2.11  - Ensure that the RotateKubeletClientCertificate argument is not set to false (Scored)
grep: <<<.Replace_configPrefix_path>>>/etc/kubernetes/kubelet.conf: No such file or directory
[WARN][Level 1][Scored] 4.2.12  - Ensure that the RotateKubeletServerCertificate argument is set to true (Scored)