k8s: Validate scheduler flags

[integration.git] / test / security / k8s / src / check / validators / master / master.go

diff --git a/test/security/k8s/src/check/validators/master/master.go b/test/security/k8s/src/check/validators/master/master.go
index ff3b796..bc019a6 100644 (file)
--- a/test/security/k8s/src/check/validators/master/master.go
+++ b/test/security/k8s/src/check/validators/master/master.go
@@ -4,6 +4,7 @@ import (
        "log"
 
        "check/validators/master/api"
+       "check/validators/master/scheduler"
 )
 
 // CheckAPI validates API server complies with CIS guideliness.
@@ -56,3 +57,10 @@ func CheckAPI(params []string) {
 
        log.Printf("IsStrongCryptoCipherInUse: %t\n", api.IsStrongCryptoCipherInUse(params))
 }
+
+// CheckScheduler validates scheduler complies with CIS guideliness.
+func CheckScheduler(params []string) {
+       log.Println("==> Scheduler:")
+       log.Printf("IsProfilingDisabled: %t\n", scheduler.IsProfilingDisabled(params))
+       log.Printf("IsInsecureBindAddressAbsentOrLoopback: %t\n", scheduler.IsInsecureBindAddressAbsentOrLoopback(params))
+}