kube-bench 不适用于 k8s

Question

I am trying to apply the kube-bench on k8s cluster on gcp environment. while creating the cluster it is failing with message:

Error: failed to generate container "<container_id>" spec: failed to generate spec: failed to mkdir "/srv/kubernetes": mkdir /srv: read-only file system

job.yml https://raw.githubusercontent.com/aquasecurity/kube-bench/main/job-master.yaml

git link: https://github.com/aquasecurity/kube-bench#installation

Answer 1

Your trying to create folder inside folder with permission ReadOnly.

The easiest workaround to make it work is changing your path form:

            - name: srv-kubernetes
              mountPath: /srv/kubernetes/

to fe :

            - name: srv-kubernetes
              mountPath: /tmp/kubernetes/

The second solution is to change permissions for this folder.

See also this and this questions with helpful answers, connected to your issue.