Merge pull request #92 from MonzElmasry/add_k3s

Add journalctl and sysd logs to mount necessary volumes for k3s-cis scans
rancher · Apr 27, 2021 · c4e676c · c4e676c
2 parents d7e1d61 + d747bc6
commit c4e676c
Showing 1 changed file with 20 additions and 0 deletions.
diff --git a/pkg/securityscan/job/job.go b/pkg/securityscan/job/job.go
@@ -142,7 +142,21 @@ func New(clusterscan *cisoperatorapiv1.ClusterScan, clusterscanprofile *cisopera
 							HostPath: &corev1.HostPathVolumeSource{
 								Path: `/etc/group`,
 							},
+						},
+					}, {
+						Name: `journalctl`,
+						VolumeSource: corev1.VolumeSource{
+							HostPath: &corev1.HostPathVolumeSource{
+								Path: ` /var/log/journal`,
+							},
 						}},
+						{
+							Name: `syslog`,
+							VolumeSource: corev1.VolumeSource{
+								HostPath: &corev1.HostPathVolumeSource{
+									Path: ` /var/log/syslog`,
+								},
+							}},
 					},
 					Containers: []corev1.Container{{
 						Name:            `rancher-cis-benchmark`,
@@ -196,6 +210,12 @@ func New(clusterscan *cisoperatorapiv1.ClusterScan, clusterscanprofile *cisopera
 						}, {
 							Name:      `etc-group`,
 							MountPath: `/etc/group`,
+						}, {
+							Name:      `journalctl`,
+							MountPath: `/var/log/journal`,
+						}, {
+							Name:      `syslog`,
+							MountPath: `/var/log/syslog`,
 						}},
 					}},
 				},