search

rancher / rancher

Complete container management platform
http://rancher.com
Apache License 2.0
23.24k stars 2.95k forks source link

[CIS] Matching kubernetes scheduler binary interfere with CIS Scans #28285

Open prachidamle opened 4 years ago

prachidamle commented 4 years ago

Issue has been reported in this comment https://github.com/rancher/rancher/issues/26598#issuecomment-649565991

User @nagyclaudiu83 is running into an issue in a cluster where "CrunchyData Postgres Operator" is deployed.

The operator is running containers with following names : k8s_event_postgres-operator-... k8s_scheduler_postgres-operator-... k8s_operator_postgres-operator-... k8s_apiserver_postgres-operator-... k8s_POD_postgres-operator-...

And one of the process is: daemon 23272 23259 0 13:56 ? 00:00:00 /opt/cpm/bin/pgo-scheduler

The error in the CIS Scan is: level=info msg="found error file" level=fatal msg="error summarizing: \nfailed to get a set of executables needed for tests: unable to detect running programs for component \"scheduler\"\n"

gz#11160

prachidamle commented 4 years ago

@nagyclaudiu83 appreciate if you could provide some detail steps to reproduce this issue.