False negative returned for some control plane servers

[cdwbrad]

I have a Rancher RKE2 cluster with three (3) control plane servers. By default the --anonymous-auth flag is set to false (on all three servers). However, trivy-operator's CIS compliance report fails two of the control plane servers. I've verified that the flag is set on all three servers.

So is this type of behavior expected? Or is there a trivy-operator configuration that I should be tweaking?

[chen-keinan]

Issue should be resolved with trivy-operator v0.18.0-rc, please check it out.

…

On Thu, Dec 28, 2023, 7:27 PM Brad Pinter ***@***.***> wrote: I have a Rancher RKE2 cluster with three (3) control plane servers. By default the --anonymous-auth flag is set to false (on all three servers). However, trivy-operator's CIS compliance report fails two of the control plane servers. I've verified that the flag is set on all three servers. So is this type of behavior expected? Or is there a trivy-operator configuration that I should be tweaking? — Reply to this email directly, view it on GitHub <#1725>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/ACKUI6P2PJFHF6WUSTUXN7DYLWTZJAVCNFSM6AAAAABBFXN4T6VHI2DSMVQWIX3LMV43ERDJONRXK43TNFXW4OZWGAYDQMRYG4> . You are receiving this because you are subscribed to this thread.Message ID: ***@***.***>