Merge pull request #491 from vardhaman22/v2.11/add-gke-volume-mounts

[main] added gke volumes to security scan config template

Author: vardhaman22

chart/templates/configmap.yaml

@@ -12,7 +12,7 @@ data:
     <1.21.0: rke2-cis-1.20-profile-permissive
     >=1.21.0: rke2-cis-1.8-profile-permissive
   eks: "eks-profile"
-  gke: "gke-profile"
+  gke: "gke-profile-1.6.0"
   aks: "aks-profile"
   k3s: "k3s-cis-1.8-profile-permissive"
   default: "cis-1.8-profile"

pkg/securityscan/core/templates/pluginConfig.template

@@ -56,6 +56,12 @@ data:
       - hostPath:
           path: /run/log
         name: run-log
+      - hostPath:
+          path: /etc/kubernetes/kubelet
+        name: etc-kubelet
+      - hostPath:
+          path: /var/lib/kubelet
+        name: var-kubelet
       {{- if .isCustomBenchmark }}
       - configMap:
           defaultMode: 420
@@ -132,6 +138,12 @@ data:
       - mountPath: /run/log/
         name: run-log
         readOnly: true
+      - mountPath: /etc/kubernetes/kubelet
+        name: etc-kubelet
+        readOnly: true
+      - mountPath: /var/lib/kubelet
+        name: var-kubelet
+        readOnly: true
       {{- if .isCustomBenchmark }}
       - mountPath: /etc/kbs/custombenchmark/cfg
         name: custom-benchmark-volume