talos/hack/test/cis/kube-bench-node.yaml
Andrew Rynhard 88667641df chore: refactor E2E scripts
This PR aims to simplify our E2E scripts.

Signed-off-by: Andrew Rynhard <andrew@andrewrynhard.com>
2020-01-26 20:47:25 -08:00

25 lines
506 B
YAML

apiVersion: batch/v1
kind: Job
metadata:
name: kube-bench-node
spec:
template:
spec:
hostPID: true
containers:
- name: kube-bench
image: aquasec/kube-bench:latest
args:
- node
- --version=1.13
volumeMounts:
- name: etc-kubernetes
mountPath: /etc/kubernetes
volumes:
- name: etc-kubernetes
hostPath:
path: /etc/kubernetes
type: Directory
restartPolicy: Never
backoffLimit: 0