Skip to content
Snippets Groups Projects
Unverified Commit 63b27ea0 authored by Kenichi Omichi's avatar Kenichi Omichi Committed by GitHub
Browse files

Fix YAML format in hardening.md (#9387)

When trying to add a hardening CI job by copying configuration from
hardening.md, yamllint CI job deleted invalid format.
This fixes it for maintaining the CI job.
parent bc5881b7
No related branches found
No related tags found
No related merge requests found
...@@ -17,9 +17,9 @@ The **kubernetes** version should be at least `v1.23.6` to have all the most rec ...@@ -17,9 +17,9 @@ The **kubernetes** version should be at least `v1.23.6` to have all the most rec
--- ---
## kube-apiserver ## kube-apiserver
authorization_modes: ['Node','RBAC'] authorization_modes: ['Node', 'RBAC']
# AppArmor-based OS # AppArmor-based OS
#kube_apiserver_feature_gates: ['AppArmor=true'] # kube_apiserver_feature_gates: ['AppArmor=true']
kube_apiserver_request_timeout: 120s kube_apiserver_request_timeout: 120s
kube_apiserver_service_account_lookup: true kube_apiserver_service_account_lookup: true
...@@ -60,7 +60,7 @@ kube_profiling: false ...@@ -60,7 +60,7 @@ kube_profiling: false
kube_controller_manager_bind_address: 127.0.0.1 kube_controller_manager_bind_address: 127.0.0.1
kube_controller_terminated_pod_gc_threshold: 50 kube_controller_terminated_pod_gc_threshold: 50
# AppArmor-based OS # AppArmor-based OS
#kube_controller_feature_gates: ["RotateKubeletServerCertificate=true","AppArmor=true"] # kube_controller_feature_gates: ["RotateKubeletServerCertificate=true", "AppArmor=true"]
kube_controller_feature_gates: ["RotateKubeletServerCertificate=true"] kube_controller_feature_gates: ["RotateKubeletServerCertificate=true"]
## kube-scheduler ## kube-scheduler
...@@ -68,7 +68,7 @@ kube_scheduler_bind_address: 127.0.0.1 ...@@ -68,7 +68,7 @@ kube_scheduler_bind_address: 127.0.0.1
kube_kubeadm_scheduler_extra_args: kube_kubeadm_scheduler_extra_args:
profiling: false profiling: false
# AppArmor-based OS # AppArmor-based OS
#kube_scheduler_feature_gates: ["AppArmor=true"] # kube_scheduler_feature_gates: ["AppArmor=true"]
## etcd ## etcd
etcd_deployment_type: kubeadm etcd_deployment_type: kubeadm
...@@ -82,7 +82,7 @@ kubelet_event_record_qps: 1 ...@@ -82,7 +82,7 @@ kubelet_event_record_qps: 1
kubelet_rotate_certificates: true kubelet_rotate_certificates: true
kubelet_streaming_connection_idle_timeout: "5m" kubelet_streaming_connection_idle_timeout: "5m"
kubelet_make_iptables_util_chains: true kubelet_make_iptables_util_chains: true
kubelet_feature_gates: ["RotateKubeletServerCertificate=true","SeccompDefault=true"] kubelet_feature_gates: ["RotateKubeletServerCertificate=true", "SeccompDefault=true"]
kubelet_seccomp_default: true kubelet_seccomp_default: true
kubelet_systemd_hardening: true kubelet_systemd_hardening: true
# In case you have multiple interfaces in your # In case you have multiple interfaces in your
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment