@@ -522,53 +522,6 @@ impl Checker for K8S04020900Checker {
522522
523523// =>o.o<= =>o.o<= =>o.o<= =>o.o<= =>o.o<= =>o.o<= =>o.o<= =>o.o<= =>o.o<= =>o.o<=
524524
525- pub struct K8S04021000Checker { }
526-
527- // Not actually applicable for Bottlerocket, but leaving logic here in case we
528- // make any changes in the future.
529- impl Checker for K8S04021000Checker {
530- fn execute ( & self , sac : & dyn SystemAccess ) -> CheckerResult {
531- #[ derive( Deserialize ) ]
532- struct KubeletConfig {
533- #[ serde( rename = "rotateCertificates" ) ]
534- rotate_certificates : bool ,
535- }
536-
537- let mut result = CheckerResult :: default ( ) ;
538-
539- if let Ok ( kubelet_file) = sac. open ( KUBELET_CONF_FILE ) {
540- if let Ok ( config) = serde_yaml:: from_reader :: < _ , KubeletConfig > ( kubelet_file) {
541- if !config. rotate_certificates {
542- result. error = "Kubelet rotateCertificates is disabled" . to_string ( ) ;
543- result. status = CheckStatus :: FAIL ;
544- } else {
545- result. status = CheckStatus :: PASS ;
546- }
547- } else {
548- // Default value is `false`, so it is a failure if this is not in the config file.
549- result. error = "Kubelet rotateCertificates is disabled" . to_string ( ) ;
550- result. status = CheckStatus :: FAIL ;
551- }
552- } else {
553- result. error = format ! ( "unable to read '{KUBELET_CONF_FILE}'" ) ;
554- }
555-
556- result
557- }
558-
559- fn metadata ( & self ) -> CheckerMetadata {
560- CheckerMetadata {
561- title : "Ensure that the --rotate-certificates argument is not set to false" . to_string ( ) ,
562- id : "4.2.10" . to_string ( ) ,
563- level : 1 ,
564- name : "k8s04021000" . to_string ( ) ,
565- mode : Mode :: Automatic ,
566- }
567- }
568- }
569-
570- // =>o.o<= =>o.o<= =>o.o<= =>o.o<= =>o.o<= =>o.o<= =>o.o<= =>o.o<= =>o.o<= =>o.o<=
571-
572525pub struct K8S04021100Checker { }
573526
574527impl Checker for K8S04021100Checker {
@@ -1476,51 +1429,6 @@ tlsPrivateKeyFile: ""
14761429 assert_eq ! ( result. status, CheckStatus :: SKIP ) ;
14771430 }
14781431
1479- // K8S04021000Checker tests - rotate certificates
1480- #[ test]
1481- pub fn test_k8s04021000checker_pass ( ) {
1482- let mut sac = UnitTestSystemAccess :: default ( ) ;
1483- let config = r#"
1484- rotateCertificates: true
1485- "# ;
1486- sac. register_file ( KUBELET_CONF_FILE , config) ;
1487- let checker = K8S04021000Checker { } ;
1488- let result = checker. execute ( & sac) ;
1489- assert_eq ! ( result. status, CheckStatus :: PASS ) ;
1490- }
1491-
1492- #[ test]
1493- pub fn test_k8s04021000checker_fail_disabled ( ) {
1494- let mut sac = UnitTestSystemAccess :: default ( ) ;
1495- let config = r#"
1496- rotateCertificates: false
1497- "# ;
1498- sac. register_file ( KUBELET_CONF_FILE , config) ;
1499- let checker = K8S04021000Checker { } ;
1500- let result = checker. execute ( & sac) ;
1501- assert_eq ! ( result. status, CheckStatus :: FAIL ) ;
1502- }
1503-
1504- #[ test]
1505- pub fn test_k8s04021000checker_fail_not_present ( ) {
1506- let mut sac = UnitTestSystemAccess :: default ( ) ;
1507- let config = r#"
1508- someOtherSetting: value
1509- "# ;
1510- sac. register_file ( KUBELET_CONF_FILE , config) ;
1511- let checker = K8S04021000Checker { } ;
1512- let result = checker. execute ( & sac) ;
1513- assert_eq ! ( result. status, CheckStatus :: FAIL ) ;
1514- }
1515-
1516- #[ test]
1517- pub fn test_k8s04021000checker_file_missing ( ) {
1518- let sac = UnitTestSystemAccess :: default ( ) ;
1519- let checker = K8S04021000Checker { } ;
1520- let result = checker. execute ( & sac) ;
1521- assert_eq ! ( result. status, CheckStatus :: SKIP ) ;
1522- }
1523-
15241432 // K8S04021100Checker tests - rotate kubelet server certificate
15251433 #[ test]
15261434 pub fn test_k8s04021100checker_pass_enabled ( ) {
0 commit comments