Kubernetes: Configuration Defaults

# SPDX-FileCopyrightText: 2022 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only

if(description)
{
  script_oid("1.3.6.1.4.1.25623.1.0.116449");
  script_version("2026-05-28T06:55:07+0000");
  script_tag(name:"last_modification", value:"2026-05-28 06:55:07 +0000 (Thu, 28 May 2026)");
  script_tag(name:"creation_date", value:"2022-07-26 12:38:17 +0000 (Tue, 26 Jul 2022)");
  script_tag(name:"cvss_base", value:"0.0");
  script_tag(name:"cvss_base_vector", value:"AV:L/AC:H/Au:S/C:N/I:N/A:N");
  script_tag(name:"qod", value:"97");

  script_name("Kubernetes: Configuration Defaults");

  script_category(ACT_SETTINGS);
  script_copyright("Copyright (C) 2022 Greenbone AG");
  script_family("Compliance");
  script_dependencies("compliance_tests.nasl");
  script_mandatory_keys("Compliance/Launch");

  script_add_preference(name:"Kubernetes: Kubernetes Directory", type:"entry", value:"/etc/kubernetes/", id:1);
  script_add_preference(name:"Kubernetes: Kubelet Directory", type:"entry", value:"/var/lib/kubelet/", id:2);
  script_add_preference(name:"Kubernetes: Kubeadm Conf File", type:"entry", value:"/etc/systemd/system/kubelet.service.d/10-kubeadm.conf", id:3);
  script_add_preference(name:"Kubernetes: ETCD Directory", type:"entry", value:"/var/lib/etcd/", id:4);
  script_add_preference(name:"Kubernetes: CNI Directory", type:"entry", value:"/etc/cni/net.d/", id:5);

  script_tag(name:"summary", value:"Configure the Kubernetes paths for the compliance tests.");

  exit(0);
}

kubernetes_directory = script_get_preference("Kubernetes: Kubernetes Directory", id:1);
if(kubernetes_directory != "")
  set_kb_item(name:"Policy/kubernetes/", value:kubernetes_directory);
else
  set_kb_item(name:"Policy/kubernetes/", value:"/etc/kubernetes/");

kubelet_directory = script_get_preference("Kubernetes: Kubelet Directory", id:2);
if(kubelet_directory != "")
  set_kb_item(name:"Policy/kubernetes/kubelet/", value:kubelet_directory);
else
  set_kb_item(name:"Policy/kubernetes/kubelet/", value:"/var/lib/kubelet/");

kubeadm_conf = script_get_preference("Kubernetes: Kubeadm Conf File", id:3);
if(kubeadm_conf != "")
  set_kb_item(name:"Policy/kubernetes/kubelet/kubeadm_conf", value:kubeadm_conf);
else
  set_kb_item(name:"Policy/kubernetes/kubelet/kubeadm_conf", value:"/etc/systemd/system/kubelet.service.d/10-kubeadm.conf");

etcd_directory = script_get_preference("Kubernetes: ETCD Directory", id:4);
if(etcd_directory != "")
  set_kb_item(name:"Policy/kubernetes/etcd/", value:etcd_directory);
else
  set_kb_item(name:"Policy/kubernetes/etcd/", value:"/var/lib/etcd/");

cni_directory = script_get_preference("Kubernetes: CNI Directory", id:5);
if(cni_directory != "")
  set_kb_item(name:"Policy/kubernetes/cni/", value:cni_directory);
else
  set_kb_item(name:"Policy/kubernetes/cni/", value:"/etc/cni/net.d/");

exit(0);