public/rancher-docs
1
0
Fork 0
mirror of https://github.com/rancher/rancher-docs.git synced 2026-09-25 20:48:11 +00:00
Code Issues Packages Projects Releases Wiki Activity

repair-malformed-updates config was completely removed in 1.14, so it should not be present in these guides.

Browse Source
This commit is contained in:
Taylor Price
2019-07-22 12:03:48 -07:00
committed by Denise
parent 7570490162
commit 4af2894c28
2 changed files with 1 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files
content/rancher/v2.x/en/security/benchmark-2.2/_index.md
+1 -7
View File
@@ -147,13 +147,7 @@ docker inspect kube-apiserver | jq -e '.[0].Args[] | match("--profiling=false").
#### 1.1.9 - Ensure that the `--repair-malformed-updates` argument is set to `false` (Scored)
**Audit**
``` bash
docker inspect kube-apiserver | jq -e '.[0].Args[] | match("--repair-malformed-updates=false").string'
```
**Returned Value:** `--repair-malformed-updates=false`
**Note:** This deprecated flag was removed in 1.14, so it cannot be set.
**Result:** Pass
content/rancher/v2.x/en/security/hardening-2.2/_index.md
-4
View File
@@ -415,7 +415,6 @@ To pass the following controls for the kube-api server ensure RKE configuration
- 1.1.1 - Ensure that the `--anonymous-auth` argument is set to false (Scored)
- 1.1.8 - Ensure that the `--profiling argument` is set to false (Scored)
- 1.1.9 - Ensure that the `--repair-malformed-updates` argument is set to false (Scored)
- 1.1.11 - Ensure that the admission control plugin `AlwaysPullImages` is set (Scored)
- 1.1.12 - Ensure that the admission control plugin `DenyEscalatingExec` is set (Scored)
- 1.1.14 - Ensure that the admission control plugin `NamespaceLifecycle` is set (Scored)
@@ -443,7 +442,6 @@ To pass the following controls for the kube-api server ensure RKE configuration
``` text
--anonymous-auth=false
--profiling=false
--repair-malformed-updates=false
--service-account-lookup=true
--enable-admission-plugins= "ServiceAccount,NamespaceLifecycle,LimitRanger,PersistentVolumeLabel,DefaultStorageClass,ResourceQuota,DefaultTolerationSeconds,AlwaysPullImages,DenyEscalatingExec,NodeRestriction,EventRateLimit,PodSecurityPolicy"
--encryption-provider-config=/etc/kubernetes/encryption.yaml
@@ -473,7 +471,6 @@ services:
extra_args:
anonymous-auth: "false"
profiling: "false"
repair-malformed-updates: "false"
service-account-lookup: "true"
enable-admission-plugins: "ServiceAccount,NamespaceLifecycle,LimitRanger,PersistentVolumeLabel,DefaultStorageClass,ResourceQuota,DefaultTolerationSeconds,AlwaysPullImages,DenyEscalatingExec,NodeRestriction,EventRateLimit,PodSecurityPolicy"
encryption-provider-config: /etc/kubernetes/encryption.yaml
@@ -1031,7 +1028,6 @@ services:
extra_args:
anonymous-auth: "false"
profiling: "false"
repair-malformed-updates: "false"
service-account-lookup: "true"
enable-admission-plugins: "ServiceAccount,NamespaceLifecycle,LimitRanger,PersistentVolumeLabel,DefaultStorageClass,ResourceQuota,DefaultTolerationSeconds,AlwaysPullImages,DenyEscalatingExec,NodeRestriction,EventRateLimit,PodSecurityPolicy"
encryption-provider-config: /etc/kubernetes/encryption.yaml