Kube-bench v0.9.0

[afdesk]

🚀 What's new? 🚀

Add GKE 1.6 CIS benchmark for GCP environment

This release adds support for CIS Google Kubernetes Engine (GKE) Benchmark v1.6.0

• Add GKE 1.6 CIS benchmark for GCP environment #1672

Two teams worked to add this improvment. There was made decission to keep only #1672, but some ideas were seen in #1677.

Thanks to @guyjerby, @ttousai, @deboshree-b and @Magier for implementing this change.

Overhaul of K3s scans

There was made overhaul existing K3s v1.24 and v1.7 scans and was added K3s CIS 1.8 scan.

• Overhaul of K3s scans #1659

Thanks to @dereknola and @deven0t for implementing this change.

👷‍♂️ Notable Fixes 🛠️

• Fix issue 1595: failed to output to ASFF #1691 thanks @w-reichert
• Updated KUBECTL_VERSION to 1.31.0 for fixing vulnerabilities #1690 thanks @jdesouza
• FIXING RKE-2-CIS-1.24 Checks #1688 thanks @sm171190 and @mjshastha
• Fix CIS-1.9 policies 5.1.1/5.1.5 typos #1658 thanks @andypitcher
• Update dockerfile to add package findutils #1657 thanks @winkrs
• fix: cis-1.9 Kubernetes policies 5.1.6 audit script #1655 thanks @winkrs
• fix: rh-1.0 check 4.1.3 typo #1652 thanks @Arano-kai
• Fix audit and remediation for CIS-1.9 master 1.1.13/1.1.14 #1649 thanks @andypitcher
• Update command to build docker to run in EKS cluster #1648 thanks @za
• Extend default kubelet configlist to fit to current AWS EKS setups (1.29 and above) #1637 thanks @mmuth
• Modify 1.2.3 Ensure that the DenyServiceExternalIPs is set in CIS-1.7/1.8/1.9 #1607 thanks @andypitcher

Special thanks

@mozillazg for reviews, comments and other contributs in Kube-bench. These efforts are really appreciable! Thanks a lot!