Unable to install kube-bench on openshift nodes

[ragashreeshekar]

I have followed the following approach to deploy the kube-bench pod in openshift cluster.
It seems the pod is getting scheduled, I am able to pull the container image however there is an issue in creating the pod sandbox.

$ kubectl apply -f job.yaml
job.batch/kube-bench created

$ kubectl get pods
NAME                      READY   STATUS              RESTARTS   AGE
kube-bench-cmwjd   0/1     ContainerCreating   0          3s

$ kubectl describe pod kube-bench-cmwjd
Events:
  Type     Reason                  Age        From               Message
  ----     ------                  ----       ----               -------
  Normal   Scheduled               6m27s      default-scheduler  Successfully assigned default/kube-bench-cmwjd to worker-2
  Warning  FailedCreatePodSandBox  5m30s      kubelet            Failed to create pod sandbox: rpc error: code = Unknown desc = failed to create pod network sandbox k8s_kube-bench-cmwjd_default_ff06adc0-1369-418c-86cc-53bdcd573db9_0(5af8f772ef8145e0ba8a8a2e85bcbf20f7d35a2adc2dea4869120fb436c9af99): error adding pod default_kube-bench-cmwjd to CNI network "multus-cni-network": Multus: [default/kube-bench-cmwjd]: error getting pod: Get "https://[api-int.test.net]:6443/api/v1/namespaces/default/pods/kube-bench-cmwjd?timeout=1m0s": dial tcp: i/o timeout

Not sure why the kube-bench pod is considering https://[api-int.test.net] as API endpoint and not https://api-int.test.net as defined in the kubeconfig. Could you please assist in running the kube-bench assessment?

Also, this document is unclear to me - https://github.com/aquasecurity/kube-bench/blob/main/docs/running.md#running-on-openshift

• How to run the assessment as a crio container against docker container? Is it supported by kube-bench?
• While running in K8s, what modifications needs to be done at the job level, could you please elaborate?

Environment

• OpenShift - 4.x
• CoreOS version - Red Hat Enterprise Linux CoreOS 48.84.202107202156-0 (Ootpa)