search

gardener / diki

Diki is a compliance checker that aims to enhance the security posture of your Kubernetes clusters.
Apache License 2.0
7 stars 8 forks source link

[Security Hardened Shoot Cluster] Rule 2002 Implementation #360

Closed georgibaltiev closed 1 week ago

georgibaltiev commented 1 week ago

What this PR does / why we need it: This PR is an implementation of Rule 2002 of the Hardened Shoot Ruleset specification. It evaluates the following 5 kubernetes components: {kubeAPIServer,kubeControllerManager,kubeScheduler,kubeProxy,kubelet}, and checks for the featureGates.AllAlpha boolean flag in their specs.

Which issue(s) this PR fixes: Part of #304

Special notes for your reviewer:

Release note:

Implementation for rule `2002` from the `security-hardened-shoot-cluster` ruleset for provider `garden`.