feat: cis eks spec update

Signed-off-by: chenk <[email protected]>
aquasecurity · Jun 9, 2024 · 6c32aea · 6c32aea
1 parent dff9513
commit 6c32aea
Showing 1 changed file with 11 additions and 11 deletions.
diff --git a/specs/compliance/aws-eks-cis-1.4.yaml b/specs/compliance/aws-eks-cis-1.4.yaml
@@ -31,7 +31,7 @@ spec:
     checks:
       - id: AVD-KCV-0070
     commands:
-        - id: CMD-0023
+      - id: CMD-0023
     severity: HIGH
   - id: 3.1.3
     name: Ensure that the kubelet configuration file has permissions set to 644 or more restrictive (Automated)
@@ -41,7 +41,7 @@ spec:
     checks:
       - id: AVD-KCV-0077
     commands:
-        - id: CMD-0030
+      - id: CMD-0030
     severity: HIGH
   - id: 3.1.4
     name: Ensure that the kubelet configuration file ownership is set to root:root (Automated)
@@ -51,15 +51,15 @@ spec:
     checks:
       - id: AVD-KCV-0078
     commands:
-        - id: CMD-0031
+      - id: CMD-0031
     severity: HIGH
   - id: 3.2.1
     name: Ensure that the Anonymous Auth is Not Enabled (Automated)
     description: Disable anonymous requests to the Kubelet server.
     checks:
-     - id: AVD-KCV-0079
+      - id: AVD-KCV-0079
     commands:
-        - id: CMD-0032
+      - id: CMD-0032
     severity: CRITICAL
   - id: 3.2.2
     name: Ensure that the --authorization-mode argument is not set to AlwaysAllow (Automated)
@@ -73,7 +73,7 @@ spec:
     checks:
       - id: AVD-KCV-0081
     commands:
-        - id: CMD-0034
+      - id: CMD-0034
     severity: CRITICAL
   - id: 3.2.4
     name: Ensure that the --read-only-port is disabled (Automated)
@@ -84,23 +84,23 @@ spec:
     checks:
       - id: AVD-KCV-0082
     commands:
-        - id: CMD-0035
+      - id: CMD-0035
     severity: HIGH
   - id: 3.2.5
     name: Ensure that the --streaming-connection-idle-timeout argument is not set to 0 (Automated)
     description: Do not disable timeouts on streaming connections.
     checks:
       - id: AVD-KCV-0085
     commands:
-        - id: CMD-0036
+      - id: CMD-0036
     severity: HIGH
   - id: 3.2.6
     name: Ensure that the --make-iptables-util-chains argument is set to true (Automated)
     description: Allow Kubelet to manage iptables.
     checks:
       - id: AVD-KCV-0084
     commands:
-        - id: CMD-0038
+      - id: CMD-0038
     severity: HIGH
   - id: 3.2.7
     name: Ensure that the --eventRecordQPS argument is set to 0 or a level which ensures appropriate event capture (Manual)
@@ -118,7 +118,7 @@ spec:
     checks:
       - id: AVD-KCV-0090
     commands:
-        - id: CMD-0043
+      - id: CMD-0043
     severity: CRITICAL
   - id: 3.2.9
     name: Ensure that the RotateKubeletServerCertificate argument is set to true (Automated)
@@ -127,7 +127,7 @@ spec:
       - id: AVD-KCV-0091
       - id: AVD-KCV-0038
     commands:
-        - id: CMD-0044
+      - id: CMD-0044
     severity: CRITICAL
   - id: 3.3.1
     name: Prefer using a container-optimized OS when possible (Manual)