Tagging @luxas who had the original idea :-)

Could you test to run kube-bench against a kubeadm cluster and post the results here?
I might be able to do it as well, but will be delayed a some weeks or so in that case :(

After we have the inital report for v1.8, we can see how both kube-bench and kubeadm can be improved. Eventually, as a consequence of that work, we can start automatically enforcing these test results in automated e2e tests.

Cheers, thanks for the great project!

@luxas just as an FYI, I'm working on securing a cluster using kube-bench and generating a kubeadm configuration file using jsonnet. The project is here: apptio/kubeadm-bootstrap#4

The complete configuration file will be here: https://github.com/apptio/kubeadm-bootstrap/blob/master/lib/kubeadm.libsonnet

This might help in future.

Hey @jaxxstorm @luxas are you guys still looking into this?

I'm not, I've stepped down from kubeadm day-to-day development.