search

gardener / diki

Diki is a compliance checker that aims to enhance the security posture of your Kubernetes clusters.
Apache License 2.0
7 stars 8 forks source link

[Security Hardened Shoot Cluster] Rule 2005 Implementation #363

Closed georgibaltiev closed 5 days ago

georgibaltiev commented 6 days ago

What this PR does / why we need it: This PR implements rule 2005 of the Security Hardened Shoot Cluster Ruleset. It evaluates the kubelet configurations of the main and worker nodes by checking the value of their connection timeouts. The checkResults are in accordance with the DISA STIG guide for rule 245541 ref.

Which issue(s) this PR fixes: Part of #304

Special notes for your reviewer:

Release note:

Implementation for rule `2005` from the `security-hardened-shoot-cluster` ruleset for provider `garden`.