def scan_spec_conf(self, conf): keys, values = extract_commands(conf) if "kube-apiserver" in keys and '--kubelet-certificate-authority' not in keys: return CheckResult.FAILED return CheckResult.PASSED
def scan_spec_conf(self, conf): keys, values = extract_commands(conf) if "kube-apiserver" in keys: if "--encryption-provider-config" not in keys: return CheckResult.FAILED return CheckResult.PASSED
def scan_spec_conf(self, conf): keys, values = extract_commands(conf) if "kube-apiserver" in keys: if '--etcd-ca-file' not in keys: return CheckResult.FAILED return CheckResult.PASSED
def scan_spec_conf(self, conf): keys, values = extract_commands(conf) if "etcd" in keys: if '--peer-cert-file' in keys and '--peer-key-file' in keys: return CheckResult.PASSED return CheckResult.FAILED return CheckResult.PASSED
def scan_spec_conf(self, conf): keys, values = extract_commands(conf) if "kubelet" in keys: if '--read-only-port' in keys and values[keys.index( '--read-only-port')] == "0": return CheckResult.PASSED return CheckResult.FAILED return CheckResult.PASSED