kube_auto_analyzer 0.0.7 → 0.0.8

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 8fd1aff1f5704afeae2c8834fc74af48bdec557b
-  data.tar.gz: f9db491c94623efc96d3250db2023c1da9af59b0
+  metadata.gz: 477ad0c2cb8e8a489cc6901f90534ef368b3baa1
+  data.tar.gz: ff57249d3d80cf7f62b86aa760eed5386765b4e0
 SHA512:
-  metadata.gz: 8b4513de20ce3a52618dec8c5bad3b86d9c9d80b7b3281101655dc2f5bf4a0e577dd1186be9cc0cb2c927515ed9c1b0cc55574b091fb2ee5a9acfcf868d300a4
-  data.tar.gz: ef690999d310ef569f7bb06b03b486133724393e7e82020ff77e69d374b0ba806d234f539f6b15762b9bb332c7129ecbdc23706c2ab879cb44aad0ec53064acc
+  metadata.gz: 1628d35f5c38de533b99979d060f1cb18f70853c36a983c6bc16076f201fe675c3c4460d287bd90ddb0ef9c7c451fcfc694751e4d527190fe1342203fdef7368
+  data.tar.gz: 9550f88df01e83f67a24dc4b18b186186a9a7642187d80e67e7aa766fcf5cb3fb489711921d556dca6c86c2fb4705be953d28dabb78e66b4b9d69020dcba836a

data/bin/kubeautoanalyzer

@@ -14,6 +14,7 @@
   options.token_file = ''
   options.config_file = false
   options.agent_checks = false
+  options.insecure = false
   
 
   opts = OptionParser.new do |opts|
@@ -30,6 +31,10 @@
       options.target_server = serv
     end
 
+    opts.on("-i", "--insecure", "Use the Insecure API Server Port") do |insecure|
+      options.insecure = true
+    end
+
     opts.on("-t", "--token [TOKEN]", "Bearer Token to Use") do |token|
       options.token = token
     end
@@ -71,7 +76,7 @@
 
   opts.parse!(ARGV)
 
-  unless (options.token.length > 1 || options.config_file || options.token_file.length > 1)
+  unless (options.token.length > 1 || options.config_file || options.token_file.length > 1 || options.insecure )
     puts "No valid auth mechanism specified"
     puts opts
     exit

data/lib/kube_auto_analyzer/agent_checks/process_checks.rb

@@ -120,7 +120,7 @@ module KubeAutoAnalyzer
         end
 
         unless kubelet_proc =~ /--keep-terminated-pod-volumes=false/
-          @results[target]['kubelet_checks'][node_hostname]['CIS 2.1.9 - that the --keep-terminated-pod-volumes argument is set to false'] = "Fail"
+          @results[target]['kubelet_checks'][node_hostname]['CIS 2.1.9 - Ensure that the --keep-terminated-pod-volumes argument is set to false'] = "Fail"
         else
           @results[target]['kubelet_checks'][node_hostname]['CIS 2.1.9 - Ensure that the --keep-terminated-pod-volumes argument is set to false'] = "Pass"
         end

data/lib/kube_auto_analyzer/api_checks/master_node.rb

@@ -395,7 +395,7 @@ module KubeAutoAnalyzer
     end
 
     #This isn't quite right as we should really check the dir. but as that's not easily done lets start with an existence check
-    unless etcd_command_line.index{|line| line =~ /--wall-dir/}
+    unless etcd_command_line.index{|line| line =~ /--wal-dir/}
       @results[target]['etcd']['CIS 1.5.7 - Ensure that the --wal-dir argument is set as appropriate'] = "Fail"
     else
       @results[target]['etcd']['CIS 1.5.7 - Ensure that the --wal-dir argument is set as appropriate'] = "Pass"
@@ -411,4 +411,4 @@ module KubeAutoAnalyzer
 
     @results[target]['evidence']['etcd'] = etcd_command_line
   end
-end
+end

data/lib/kube_auto_analyzer/reporting.rb

@@ -29,7 +29,7 @@ module KubeAutoAnalyzer
           font-size: 48px;
           color: #C41230;
         }
-        .master-node, .worker-node {
+        .master-node, .worker-node, .vuln-node {
           background: #F5F5F5;
           border: 1px solid black;
           padding-left: 6px;

data/lib/kube_auto_analyzer/version.rb

@@ -1,3 +1,3 @@
 module KubeAutoAnalyzer
-  VERSION = "0.0.7"
+  VERSION = "0.0.8"
 end

data/lib/kube_auto_analyzer.rb

@@ -51,7 +51,7 @@ module KubeAutoAnalyzer
         auth_options = { bearer_token: @options.token}
       elsif @options.token_file.length > 1
         auth_options = { bearer_token_file: @options.token_file}
-      else
+      elsif @options.insecure 
         #Not sure this will actually work for no auth. needed, try and ooold cluster to check
         auth_options = {}
       end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: kube_auto_analyzer
 version: !ruby/object:Gem::Version
-  version: 0.0.7
+  version: 0.0.8
 platform: ruby
 authors:
 - Rory McCune
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2017-10-08 00:00:00.000000000 Z
+date: 2017-11-03 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler