Mapping of kube-bench v0.9.4 to CIS Kubernetes Benchmark versions

[billl5837]

Thank you for providing this tool to help me verify my Kubernetes environment.

I would like to ask which version of the CIS Benchmark is mapped to kube-bench:0.9.4?

Currently, I have downloaded version v1.9 of the CIS Benchmark from the CIS Community, and I would like to perform checks based on the v1.9 version.

[afdesk]

@billl5837 thanks for the interest
the latest version (v0.10.0) contains several configs for checks, it includes cis-1.9 too

you can see the details here https://github.com/aquasecurity/kube-bench/tree/main/cfg

[billl5837]

@afdesk
When I deployed and performed a scan using the latest version of kube-bench:0.10.0 through a Job, I noticed that there are only 8 items under RBAC and Service Accounts. However, according to the configuration file provided in the link you shared, there should be 13 items under section 5.2. Hasn't this already been merged into the latest 0.10.0 version?

I'm new to GitLab and not sure if the deployment process is supposed to be this straightforward.

[afdesk]

could you share the logs for your scan?
and did you run this job? https://github.com/aquasecurity/kube-bench/blob/main/job.yaml
I need more details about your run. )
thanks