ETCD ownership related checks will always failed when running in container

[mozillazg]

Overview

ETCD ownership related checks will always failed when running in container. Because of there is no user named etcd in container.

Maybe we should mount the /etc/passwd and /etc/group from host when running in container (need update README.md and job-master.yaml)?

How did you run kube-bench?

kubectl apply -f job-master.yaml 

What happened?

ETCD ownership related checks always failed.

kube-bench/cfg/cis-1.6/master.yaml

Lines 158 to 164 in 50fce51

	- id: 1.1.12
	text: "Ensure that the etcd data directory ownership is set to etcd:etcd (Automated)"
	audit: ps -ef | grep $etcdbin | grep -- --data-dir | sed 's%.*data-dir[= ]\([^ ]*\).*%\1%' | xargs stat -c %U:%G
	tests:
	test_items:
	- flag: "etcd:etcd"
	remediation: |

What did you expect to happen:

Not failed when the ownership of ETCD data-dir is etcd:etcd.

Environment

[What is your version of kube-bench? (run kube-bench version)]

v0.5.0

[yoavrotems]

Hey @mozillazg thanks for informing us about this issue, currently I'm working on different issues but I will mark it as good first issue and help wanted