+ Apply JSON formatted Kubernetes manifest to cluster +
++ This action has the following parameters: +
+json+
+ The content of the manifest to deploy in JSON format +
++ Default: +
+ Run the CIS Kubernetes Benchmark against snap-based components. +
++ This action has the following parameters: +
+apply+
+ Apply remediations to address benchmark failures. The default, 'none', will not attempt to fix any reported failures. Set to 'conservative' to resolve simple failures. Set to 'dangerous' to attempt to resolve all failures. Note: Applying any remediation may result in an unusable cluster. +
++ Default: none +
config+
+ Archive containing configuration files to use when running kube-bench. The default value is known to be compatible with snap components. When using a custom URL, append '#<hash_type>=<checksum>' to verify the archive integrity when downloaded. +
++ Default: https://github.com/charmed-kubernetes/kube-bench-c onfig/archive/cis-1.5.zip#sha1=cb8e78712ee5bfeab87 d0ed7c139a83e88915530 +
release+
+ Set the kube-bench release to run. If set to 'upstream', the action will compile and use a local kube-bench binary built from the master branch of the upstream repository: https://github.com/aquasecurity/kube-bench This value may also be set to an accessible archive containing a pre-built kube-bench binary, for example: https://github.com/aquasecurity/kube- bench/releases/download/v0.0.34/kube-bench_0.0.34_ linux_amd64.tar.gz#sha256=f96d1fcfb84b18324f1299db 074d41ef324a25be5b944e79619ad1a079fca077 +
++ Default: https://github.com/aquasecurity/kube- bench/releases/download/v0.2.3/kube-bench_0.2.3_li nux_amd64.tar.gz#sha256=429a1db271689aafec009434de d1dea07a6685fee85a1deea638097c8512d548 +
+ Collect debug data +
++ Retrieve Kubernetes cluster config, including credentials +
++ Create new namespace +
++ This action has the following parameters: +
+name+
+ Namespace name eg. staging +
++ Default: +
+ Delete namespace +
++ This action has the following parameters: +
+name+
+ Namespace name eg. staging +
++ Default: +
+ List existing k8s namespaces +
++ Restart the Kubernetes master services on demand. +
++ Upgrade the kubernetes snaps +
++ This action has the following parameters: +
+fix-cluster-name+
+ If using the OpenStack cloud provider, whether to fix the cluster name sent to it to include the cluster tag. This fixes an issue with load balancers conflicting with other clusters in the same project but will cause new load balancers to be created which will require manual intervention to resolve. +
++ Default: True +