From 9fb4292df25166d12eb904531a619608a2164124 Mon Sep 17 00:00:00 2001 From: Saurabh Parekh Date: Fri, 22 Dec 2023 11:16:36 -0800 Subject: [PATCH] Update README to remove note (#7202) --- test/kube-bench/README.md | 2 -- 1 file changed, 2 deletions(-) diff --git a/test/kube-bench/README.md b/test/kube-bench/README.md index 13696830da74..fb16329173b9 100644 --- a/test/kube-bench/README.md +++ b/test/kube-bench/README.md @@ -25,5 +25,3 @@ The following tests are also skipped they are not applicable or check for settin | **Worker node configuration** | | 4.2.6 | Ensure that the –protect-kernel-defaults argument is set to true | System level configurations are required before provisioning the cluster in order for this argument to be set to true | | 4.2.10 | Ensure that the–tls-cert-file and –tls-private-key-file arguments are set as appropriate | When generating serving certificates, functionality could break in conjunction with hostname overrides which are required for certain cloud providers | - -**Note:** Running kube-bench on Bottlerocket controlplane currently produces false negatives with respect to pod specification file (manifest) permissions, since the [default configuration](https://github.com/aquasecurity/kube-bench/blob/main/cfg/config.yaml) does not include the file locations in which Bottlerocket places these manifests. This issue is being tracked [here](https://github.com/aquasecurity/kube-bench/issues/996).