From: Pawel Wieczorek Date: Tue, 17 Sep 2019 13:59:30 +0000 (+0200) Subject: Update git submodules X-Git-Tag: 6.0.0-ONAP~5131 X-Git-Url: https://gerrit.onap.org/r/gitweb?p=doc.git;a=commitdiff_plain;h=951eadff1d46c1d04e05cf4731e4cabd21557be9 Update git submodules * Update docs/submodules/integration.git from branch 'master' to aeaa5a1f5e57f63dd203db43fb6992ab1728c504 - k8s: Validate API server excluded admission plugins This patch verifies if CIS Kubernetes Benchmark v1.3.0 section regarding master node configuration is satisfied (1.1.10). However, CIS Kubernetes Benchmark v1.3.0 mismatches official documentation: Kubernetes 1.10+ already provides safe defaults from security standpoint [1] (ONAP Casablanca uses 1.11). Deprecated admission control plugin flag has also been validated since it was still available in Kubernetes provided by Rancher [2]. [1] https://kubernetes.io/docs/reference/access-authn-authz/admission-controllers/#is-there-a-recommended-set-of-admission-controllers-to-use [2] https://github.com/rancher/rancher/issues/15064 Issue-ID: SECCOM-235 Change-Id: I0e8fe9f885861f155cb8265df085fa93dbdff6d2 Signed-off-by: Pawel Wieczorek --- diff --git a/docs/submodules/integration.git b/docs/submodules/integration.git index 0dc16f1f0..aeaa5a1f5 160000 --- a/docs/submodules/integration.git +++ b/docs/submodules/integration.git @@ -1 +1 @@ -Subproject commit 0dc16f1f0c60625a1637ee1ec106a4df543dab92 +Subproject commit aeaa5a1f5e57f63dd203db43fb6992ab1728c504