Containers Kubernetes Master

apply-manifest

Apply JSON formatted Kubernetes manifest to cluster

Params

• json string

  The content of the manifest to deploy in JSON format

Required

json

cis-benchmark

Run the CIS Kubernetes Benchmark against snap-based components.

Params

• apply string

  Apply remediations to address benchmark failures. The default, 'none', will not attempt to fix any reported failures. Set to 'conservative' to resolve simple failures. Set to 'dangerous' to attempt to resolve all failures.

  Note: Applying any remediation may result in an unusable cluster.

• config string

  Archive containing configuration files to use when running kube-bench. The default value is known to be compatible with snap components. When using a custom URL, append '#<hash_type>=<checksum>' to verify the archive integrity when downloaded.

• release string

  Archive containing the 'kube-bench' binary to run. The default value points to a stable upstream release. When using a custom URL, append '#<hash_type>=<checksum>' to verify the archive integrity when downloaded.

  This may also be set to the special keyword 'upstream'. In this case, the action will compile and use a local kube-bench binary built from the master branch of the upstream repository: https://github.com/aquasecurity/kube-bench

debug

Collect debug data

get-kubeconfig

Retrieve Kubernetes cluster config, including credentials

namespace-create

Create new namespace

Params

• name string

  Namespace name eg. staging

Required

name

namespace-delete

Delete namespace

Params

• name string

  Namespace name eg. staging

Required

name

namespace-list

List existing k8s namespaces

restart

Restart the Kubernetes master services on demand.

upgrade

Upgrade the kubernetes snaps

Params

• fix-cluster-name boolean

  If using the OpenStack cloud provider, whether to fix the cluster name sent to it to include the cluster tag. This fixes an issue with load balancers conflicting with other clusters in the same project but will cause new load balancers to be created which will require manual intervention to resolve.

user-create

Create a new user

Params

• groups string

  Optional comma-separated list of groups eg. 'system:masters,managers'

• name string

  Username for the new user. This value must only contain alphanumeric characters, ':', '@', '-' or '.'.

Required

name

user-delete

Delete an existing user

Params

• name string

  Username of the user to delete

Required

name

user-list

List existing users