kube-bench · Issues· 106 open

If use daemonset can not terminate automatically after scan, if use cronjob can not scan all the nodes.

Tests 4.1.3 and 4.1.4 do not pass if proxy kubeconfig is not present (regression from issue 699 ?)

4.6.3 default-namespace check false-positive FAIL: regex does not match kubectl's service/kubernetes output (aks-1.7/1.8, gke-1.8.0/1.9.0)

Container Network Interface file permissions (--cni-conf-dir)

CNI file checks 1.1.9/1.1.10 false-FAIL on CNIs without host-local IPAM (absent /var/lib/cni/networks)

Support CIS Google Kubernetes Engine (GKE) GKE-2.0.0 for k8s v1.34 - v1.35

Support CIS Azure Kubernetes Service (AKS) AKS-2.0.0 for k8s v1.29 - v1.35

Support CIS Amazon Elastic Kubernetes Service (EKS) EKS-2.0.0 for k8s v1.34 - v1.35

Support CIS kubernetes CIS-2.0.1 for k8s v1.34 - v1.35

kube-bench fail to check kubelet service file at /usr/lib/systemd/system/kubelet.service on openSuSE worker node

Support CIS kubernetes CIS-1.12 for k8s v1.32 - v1.34

Space separator is not supported when auditing command line options

Missing release artifacts since v0.15.0

CIS benchmark 4.3.1 returns exit `1` when no process found, resulting in false positive

CIS-1.9 Kubernetes Policies Checks 5.1.2 and 5.1.4 returns an error connection refused