From 31138d43f1d22fe90fd2a082109a472c5ea8af85 Mon Sep 17 00:00:00 2001 From: Rayan Das Date: Wed, 27 Sep 2023 21:53:37 +0530 Subject: [PATCH] make remove 5.0.0-rc2 --- .../rancher-cis-benchmark-crd-5.0.0-rc2.tgz | Bin 1465 -> 0 bytes .../rancher-cis-benchmark-5.0.0-rc2.tgz | Bin 8357 -> 0 bytes .../5.0.0-rc2/Chart.yaml | 10 - .../5.0.0-rc2/README.md | 2 - .../5.0.0-rc2/templates/clusterscan.yaml | 148 ------------ .../templates/clusterscanbenchmark.yaml | 54 ----- .../templates/clusterscanprofile.yaml | 36 --- .../templates/clusterscanreport.yaml | 39 ---- .../5.0.0-rc2/Chart.yaml | 22 -- .../rancher-cis-benchmark/5.0.0-rc2/README.md | 9 - .../5.0.0-rc2/app-readme.md | 33 --- .../5.0.0-rc2/templates/_helpers.tpl | 27 --- .../5.0.0-rc2/templates/alertingrule.yaml | 14 -- .../templates/benchmark-aks-1.0.yaml | 8 - .../templates/benchmark-cis-1.20.yaml | 9 - .../templates/benchmark-cis-1.23.yaml | 9 - .../templates/benchmark-cis-1.24.yaml | 9 - .../templates/benchmark-cis-1.5.yaml | 9 - .../templates/benchmark-cis-1.6.yaml | 9 - .../templates/benchmark-cis-1.7.yaml | 8 - .../templates/benchmark-eks-1.0.1.yaml | 8 - .../templates/benchmark-gke-1.2.0.yaml | 8 - .../benchmark-k3s-cis-1.20-hardened.yaml | 9 - .../benchmark-k3s-cis-1.20-permissive.yaml | 9 - .../benchmark-k3s-cis-1.23-hardened.yaml | 9 - .../benchmark-k3s-cis-1.23-permissive.yaml | 9 - .../benchmark-k3s-cis-1.24-hardened.yaml | 9 - .../benchmark-k3s-cis-1.24-permissive.yaml | 9 - .../benchmark-k3s-cis-1.6-hardened.yaml | 9 - .../benchmark-k3s-cis-1.6-permissive.yaml | 9 - .../benchmark-k3s-cis-1.7-hardened.yaml | 8 - .../benchmark-k3s-cis-1.7-permissive.yaml | 8 - .../benchmark-rke-cis-1.20-hardened.yaml | 9 - .../benchmark-rke-cis-1.20-permissive.yaml | 9 - .../benchmark-rke-cis-1.23-hardened.yaml | 9 - .../benchmark-rke-cis-1.23-permissive.yaml | 9 - .../benchmark-rke-cis-1.24-hardened.yaml | 9 - .../benchmark-rke-cis-1.24-permissive.yaml | 9 - .../benchmark-rke-cis-1.5-hardened.yaml | 9 - .../benchmark-rke-cis-1.5-permissive.yaml | 9 - .../benchmark-rke-cis-1.6-hardened.yaml | 9 - .../benchmark-rke-cis-1.6-permissive.yaml | 9 - .../benchmark-rke-cis-1.7-hardened.yaml | 8 - .../benchmark-rke-cis-1.7-permissive.yaml | 8 - .../benchmark-rke2-cis-1.20-hardened.yaml | 9 - .../benchmark-rke2-cis-1.20-permissive.yaml | 9 - .../benchmark-rke2-cis-1.23-hardened.yaml | 9 - .../benchmark-rke2-cis-1.23-permissive.yaml | 9 - .../benchmark-rke2-cis-1.24-hardened.yaml | 9 - .../benchmark-rke2-cis-1.24-permissive.yaml | 9 - .../benchmark-rke2-cis-1.5-hardened.yaml | 9 - .../benchmark-rke2-cis-1.5-permissive.yaml | 9 - .../benchmark-rke2-cis-1.6-hardened.yaml | 9 - .../benchmark-rke2-cis-1.6-permissive.yaml | 9 - .../benchmark-rke2-cis-1.7-hardened.yaml | 8 - .../benchmark-rke2-cis-1.7-permissive.yaml | 8 - .../5.0.0-rc2/templates/cis-roles.yaml | 49 ---- .../5.0.0-rc2/templates/configmap.yaml | 18 -- .../5.0.0-rc2/templates/deployment.yaml | 61 ----- .../templates/network_policy_allow_all.yaml | 15 -- .../patch_default_serviceaccount.yaml | 29 --- .../5.0.0-rc2/templates/psp.yaml | 59 ----- .../5.0.0-rc2/templates/rbac.yaml | 213 ------------------ .../templates/scanprofile-cis-1.20.yaml | 9 - .../templates/scanprofile-cis-1.23.yaml | 9 - .../templates/scanprofile-cis-1.24.yaml | 9 - .../templates/scanprofile-cis-1.6.yaml | 9 - .../templates/scanprofile-cis-1.7.yaml | 9 - .../scanprofile-k3s-cis-1.20-hardened.yml | 9 - .../scanprofile-k3s-cis-1.20-permissive.yml | 9 - .../scanprofile-k3s-cis-1.23-hardened.yml | 9 - .../scanprofile-k3s-cis-1.23-permissive.yml | 9 - .../scanprofile-k3s-cis-1.24-hardened.yml | 9 - .../scanprofile-k3s-cis-1.24-permissive.yml | 9 - .../scanprofile-k3s-cis-1.6-hardened.yml | 9 - .../scanprofile-k3s-cis-1.6-permissive.yml | 9 - .../scanprofile-k3s-cis-1.7-hardened.yml | 9 - .../scanprofile-k3s-cis-1.7-permissive.yml | 9 - .../scanprofile-rke-1.20-hardened.yaml | 9 - .../scanprofile-rke-1.20-permissive.yaml | 9 - .../scanprofile-rke-1.23-hardened.yaml | 9 - .../scanprofile-rke-1.23-permissive.yaml | 9 - .../scanprofile-rke-1.24-hardened.yaml | 9 - .../scanprofile-rke-1.24-permissive.yaml | 9 - .../scanprofile-rke-1.6-hardened.yaml | 9 - .../scanprofile-rke-1.6-permissive.yaml | 9 - .../scanprofile-rke-1.7-hardened.yaml | 9 - .../scanprofile-rke-1.7-permissive.yaml | 9 - .../scanprofile-rke2-cis-1.20-hardened.yml | 9 - .../scanprofile-rke2-cis-1.20-permissive.yml | 9 - .../scanprofile-rke2-cis-1.23-hardened.yml | 9 - .../scanprofile-rke2-cis-1.23-permissive.yml | 9 - .../scanprofile-rke2-cis-1.24-hardened.yml | 9 - .../scanprofile-rke2-cis-1.24-permissive.yml | 9 - .../scanprofile-rke2-cis-1.6-hardened.yml | 9 - .../scanprofile-rke2-cis-1.6-permissive.yml | 9 - .../scanprofile-rke2-cis-1.7-hardened.yml | 9 - .../scanprofile-rke2-cis-1.7-permissive.yml | 9 - .../5.0.0-rc2/templates/scanprofileaks.yml | 9 - .../5.0.0-rc2/templates/scanprofileeks.yml | 9 - .../5.0.0-rc2/templates/scanprofilegke.yml | 9 - .../5.0.0-rc2/templates/serviceaccount.yaml | 14 -- .../templates/validate-install-crd.yaml | 17 -- .../templates/validate-psp-install.yaml | 7 - .../5.0.0-rc2/values.yaml | 55 ----- index.yaml | 40 ---- 106 files changed, 1690 deletions(-) delete mode 100644 assets/rancher-cis-benchmark-crd/rancher-cis-benchmark-crd-5.0.0-rc2.tgz delete mode 100644 assets/rancher-cis-benchmark/rancher-cis-benchmark-5.0.0-rc2.tgz delete mode 100644 charts/rancher-cis-benchmark-crd/5.0.0-rc2/Chart.yaml delete mode 100644 charts/rancher-cis-benchmark-crd/5.0.0-rc2/README.md delete mode 100644 charts/rancher-cis-benchmark-crd/5.0.0-rc2/templates/clusterscan.yaml delete mode 100644 charts/rancher-cis-benchmark-crd/5.0.0-rc2/templates/clusterscanbenchmark.yaml delete mode 100644 charts/rancher-cis-benchmark-crd/5.0.0-rc2/templates/clusterscanprofile.yaml delete mode 100644 charts/rancher-cis-benchmark-crd/5.0.0-rc2/templates/clusterscanreport.yaml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/Chart.yaml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/README.md delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/app-readme.md delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/_helpers.tpl delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/alertingrule.yaml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-aks-1.0.yaml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-cis-1.20.yaml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-cis-1.23.yaml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-cis-1.24.yaml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-cis-1.5.yaml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-cis-1.6.yaml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-cis-1.7.yaml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-eks-1.0.1.yaml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-gke-1.2.0.yaml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-k3s-cis-1.20-hardened.yaml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-k3s-cis-1.20-permissive.yaml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-k3s-cis-1.23-hardened.yaml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-k3s-cis-1.23-permissive.yaml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-k3s-cis-1.24-hardened.yaml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-k3s-cis-1.24-permissive.yaml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-k3s-cis-1.6-hardened.yaml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-k3s-cis-1.6-permissive.yaml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-k3s-cis-1.7-hardened.yaml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-k3s-cis-1.7-permissive.yaml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke-cis-1.20-hardened.yaml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke-cis-1.20-permissive.yaml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke-cis-1.23-hardened.yaml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke-cis-1.23-permissive.yaml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke-cis-1.24-hardened.yaml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke-cis-1.24-permissive.yaml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke-cis-1.5-hardened.yaml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke-cis-1.5-permissive.yaml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke-cis-1.6-hardened.yaml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke-cis-1.6-permissive.yaml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke-cis-1.7-hardened.yaml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke-cis-1.7-permissive.yaml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke2-cis-1.20-hardened.yaml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke2-cis-1.20-permissive.yaml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke2-cis-1.23-hardened.yaml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke2-cis-1.23-permissive.yaml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke2-cis-1.24-hardened.yaml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke2-cis-1.24-permissive.yaml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke2-cis-1.5-hardened.yaml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke2-cis-1.5-permissive.yaml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke2-cis-1.6-hardened.yaml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke2-cis-1.6-permissive.yaml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke2-cis-1.7-hardened.yaml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke2-cis-1.7-permissive.yaml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/cis-roles.yaml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/configmap.yaml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/deployment.yaml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/network_policy_allow_all.yaml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/patch_default_serviceaccount.yaml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/psp.yaml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/rbac.yaml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-cis-1.20.yaml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-cis-1.23.yaml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-cis-1.24.yaml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-cis-1.6.yaml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-cis-1.7.yaml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-k3s-cis-1.20-hardened.yml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-k3s-cis-1.20-permissive.yml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-k3s-cis-1.23-hardened.yml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-k3s-cis-1.23-permissive.yml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-k3s-cis-1.24-hardened.yml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-k3s-cis-1.24-permissive.yml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-k3s-cis-1.6-hardened.yml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-k3s-cis-1.6-permissive.yml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-k3s-cis-1.7-hardened.yml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-k3s-cis-1.7-permissive.yml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke-1.20-hardened.yaml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke-1.20-permissive.yaml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke-1.23-hardened.yaml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke-1.23-permissive.yaml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke-1.24-hardened.yaml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke-1.24-permissive.yaml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke-1.6-hardened.yaml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke-1.6-permissive.yaml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke-1.7-hardened.yaml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke-1.7-permissive.yaml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke2-cis-1.20-hardened.yml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke2-cis-1.20-permissive.yml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke2-cis-1.23-hardened.yml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke2-cis-1.23-permissive.yml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke2-cis-1.24-hardened.yml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke2-cis-1.24-permissive.yml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke2-cis-1.6-hardened.yml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke2-cis-1.6-permissive.yml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke2-cis-1.7-hardened.yml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke2-cis-1.7-permissive.yml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofileaks.yml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofileeks.yml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofilegke.yml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/serviceaccount.yaml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/validate-install-crd.yaml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/templates/validate-psp-install.yaml delete mode 100644 charts/rancher-cis-benchmark/5.0.0-rc2/values.yaml diff --git a/assets/rancher-cis-benchmark-crd/rancher-cis-benchmark-crd-5.0.0-rc2.tgz b/assets/rancher-cis-benchmark-crd/rancher-cis-benchmark-crd-5.0.0-rc2.tgz deleted file mode 100644 index 0032585194d024af2816f878cbe461cfbf547287..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1465 zcmV;q1xETGiwG0|00000|0w_~VMtOiV@ORlOnEsqVl!4SWK%V1T2nbTPgYhoO;>Dc zVQyr3R8em|NM&qo0PI>(bK*7-&NIJ4bA85V6UcRV%W>DvwY^-1q}S&~-heK)xo zrXtipO83pu5QdePXbcbx_U)yw{@1zMgGhWuZG@6z_T=?^G+c{_lK-EiAqWD)Xn|}p z{b1OG($!c_ugMWDBOEh`qCoKEuJxW?{Ei&gar>GNdZ&J-ZLB{23BxD=Li3gfu_4rk zgWO3EHpjo`4m__I{{!#xa&V6SV^}_NAQJdYDD6MvJpOEK2tIkeM2oYy)q zaTtPLI;04K0`7gTr4>{J#uSilR}HOz9zYbQ^vkND6_9xpQ32>~)zAv)Z_u&;^w+AP z6_8YPovQsTC_c^`MQp8WE9{Ib_aa0?5EfVbM|EcdaD?13e1U!(pl=yAQSw2|9j=wU z%i4=%T<=(OVd9z2!aZZYjTO6uG5hD=bO>Ky2rr!~LV11r>FecPp_#Er+iXu_g_B&I zX~D{>$EA)6fmQBiOvXWAA4D#S^R~9QJoMUqYYksNaclXfP}ScE->?E}8VRM>F~bAy8$f;YyD1q!kq?B2_Z6Zs zb{BL|CmO*hc~~D+?C#n}GT?w7HcHV}K>=FBvef4b69usBIJ=?NN^eRy^_shpbNlB+ z%Y=i0)2j|t%06pc{)T5rQ6%S{dE0dGrZkO8Q(=J!mQo6FE(0J-X$Pa2Q>wl|KX^TQ&L;Zj7 zZg^Fy|6L9Sm*@K5G3?OwzgNO^SO|Rof|+zzR0LN}Pg@#{kUQD5Znb(6{;OmbDuSiH zElNG1kiW+>)Dj6z_WTOSpX&!~0}sy)@bv?>faeL5UY}xGa`_C=TE%pWfqS}3-bZci zGe7#fu9lTZ*Xg->!~HpypY$zaht8@9-zk1YICh7>&*rLS{*ThrNW0g74f)?24K7Rh zfADVLo%8=O?9ll?BTR?cKmYEmBKN;I>^}2gUu)0%+bSrDA{~9CJ`m3-e{l6NG%KCrhp1=P%iXB@2Q^Is8 z|I-ApPW>}?r$6=`=pFyw;>3QSM0Us;cS^M1?!Md{aUXwx_^;Rh>Bs92pFcXGzqgO3 z?|;4Fp!EIkXy~5ne@C&OHhk=Q&8BG|;|tKlXaU5;+UK;fL7&Z*b)VFpdWB~@+u6=` TwkrEC00960b0BjU05kvq0s+xW diff --git a/assets/rancher-cis-benchmark/rancher-cis-benchmark-5.0.0-rc2.tgz b/assets/rancher-cis-benchmark/rancher-cis-benchmark-5.0.0-rc2.tgz deleted file mode 100644 index 4dc1ffd7233f9046c52a464f360b2cb90049701f..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 8357 zcmX|{cRbc#`2Wphl&mD>R+Ldj6q)xenaLG-U!2v@SPfjtu+^SDyC$EPm(2ul5_uZ?~!F z4a__jnhfj5eHl}&wndnc)4no@uQ}S@!-hgW$$lhVXI(K|qQ9_0b%Eq9<4g}TcrsI% zCu34k?@Y&9l8UiIAjXfUu4#)jby&!}pP(5N;5YB;{6lw|p`k8s(u)%dby#28s1Iaw zeXHZtn?<+3rPZI>be1u6bWFNv%~PRmqfRloJSRk|6W-_M^ofcm4JWMfCdNQU`u7zv zYQcuwoK-#@SsFV8LXW#uKbI$|_@dbA>R+rjy?dbls(qrV#e>C2a$HGju*{vcQCc|F9$FFBhiD!%#fPNwa~E3Hpm zI=t*fYx@K-O+Vjx_FAP>!ABY&BXnfUi?;Sp$ny^11Q(8`s*Uw8)gvmB1nyUVxT>`7=^`DWOEYlQmje=>)GX%7i4jDO-@zfw&L;7*Z`)Aek^F@&g-rB{=3WO6 zg$4{u_r?QHxW0B}X>#^qLt4zX#W+-e-HWjwarYwJ$F7;^WwiusUcy<22LH-=6@d8k zN&0uBeETh3BkgK-fqA^EQP%2>)xJBc|3v2byafr%_6G`1N`Aw`;m&<*;(c_(PnruJ zP-llKGe+qvnMA#wYqn)*lb${;s^5kg-fh8YVbP{;qVu@cPUJU}Co`lJJ~pEvXVk60@h0auJ$8 zFN^K43+!F*rcsfegPh}N{u%$b4G$a1g_N^G&tAJvjzrn9kU+5lpD zQz=pi3rj+QxuaUST9Jea;86>YY<;b;N<=71Z17q2$0mMo9sb};QCsWk@?Im(wc~_C zFS4_}3>_)dx|my$6zYjx4pTl~q|*QWmt$O6+l%z1i}{GOzI++4*|RlY2h`gqHF?o) z7c5FyXFa3J&#MxZP?5c3;SVvVCtZRWBQZ0|f70x`j1TkVzg)wLilUc19d(2BgsXwN zkjTf#!OoJMXOZNsvva6mpPTEZL=2s~x3qh7#<)2ekn#o(uI*J= zS@+;jCJR^Us`6j2lVcG)fanJ*Fl(#~@41U-_t5MoH5yjE_@Lw zrBTaERb5h@2|yvfqJ}iq&qz?h8aeQvj%dQeUqpaI2q{n;240ttwvKvn@JbR~_;3kS zo`$$d$X@VPpBaRw;NjQj!63dSXkD3T)YeRbmkK}OwYxYPOM9U|@4(u?D^dEF6VR z{a^aPZ~R?j%@7>^iii?rIFVWC%<-wQkJ1 zS+s1PD89&rcj5DWpD6A#!D%)Cen70m>4ZfjM{xoum9rFUk&V_S!EWY&Kfr~qW(T=_ zKydM)9gUA7RhWYSZ{Q+8F=QA-I#92wUx8Rz%K)CD1o(Kzi3HwUR_>`A@t(33CrBT}Gmn!4%8tJh=4! z*q-+h4lZ8_9feQlLD{B|Y)Av;9)WYIqZy^tfPbO9@dL>fq3FTQ!R8Es0Dv0i)4v9d3NYXnVMB{C$KQtG3Qg9XkLU|BL zNa^BO(6|n+Jx5WD;S}Rwa@`hiqPw*Vs0c1%i0R^AfN%t!kX=qvgh?eMZPx1=k@gyD z&{#7-uTttKfbe5w?A5uT>|2!py$M`ScEINW4iFLt-^GI5P%kfhfV9ot+aH1p^O8~l>K`GlvJ1{>4sbbK? zH0pnw#cVzKUn#BwQ)YeH!#N~sl9p-_LIwl$vzwJ@a4Yon9`fe}zhn^92#!7!_kbY9 zSME^!E&*PN0%I(z3m}f~RSlKK-CNMs5fy@q44b6*8cM*S=4q+ot1z3OjQ0`Vq7j-p zK&k5s{jXoqlnLCTrZj}zI@X5iU33}c@5e?aK#zm z6QJ4%VNULnxH;zJ1r0sKmysN5avshWJ@;#8(~0%1bjysYKj>}5*a*T0k*D9ig4DJp zB`t2ruf6TKz$NS_Y}R)*Dk@R@`N~4_$AJ@}dY|KY(N2oOlCyWzirx!fb!UN1l_T;h zgJ?D+x99Zu2?Wy5)((6g3brPgA&TF*k!X;jMmJ?B>Q&xu`yj|@|L@Y++=#c>bF zdWCm_2$(hR0D5xW5lB~Y%KYr z?nyue8J&WGpN2rh$4izasi`IHs;m8I*uN~<3Vq-MwM>l892!6?SGq_23=oI~< zqe+h^TOH;lyDLB2Eo2^J6Yk_u3ok+QL>Lmc(wV*XLclJNeV15uST_1>tniAT%gaBd zy&v_sT`*?Idi?%ofB0Ijk!*H(@DE785C3vP(T`v}BkKY|>hb;gx8kZ(>hCI@zcL!M z2hD}oxjfxU6p)hI8G4OjcR4lraPFStPnYd`U0lxBS2y%zVKZh(f8>tyPglD}tKMN>qGP>Pq$OoM;kb} zO=@gE*X{G8K=d_!PqYu|!n|zrj7%Q5{19^iML!e7yxpV&h z#Fxr8ou;At$zYfb3n#B81ZAn*ZxrXS6Eq~gx;PpY9K zFqk7q(c1zUEj*9BTGkw< z;g50SQeaZon)2A^j?2g%kV84eUz&a3^&cQ>?TfM4hWZ-o%tSiZdS8~R>wI>)XV8mH zXJtJ5Dp)+AStIDgSNuz`Q{=f zvGW;IuA$|-brSXq!)gh30mLZvonf;?$9J>4?V&Gdf*d>Pt-a460)m>=rdV{U_d9iS z0NAx~Vi#>5WOV+sw8an{y^fl+k{tS{8ptv3+hl3G`P!$g1N<%a}pGuta!mg>Lj&$-gCy4LFcEzYfo=KuxZn{jJrk^dE?u$F# zGO2Y6CdSx5N1hD2@YAbHe1X2vg}U#%VX9HZaNqvX?YJij-d=crazNFC=@5Fn7Yo+T z?sfIDGqsJ?@@j;@=jzm_BA%^qElyK=ft|9)SSP!m{M&9JI&APpqoQ}N-DKBX~R8RFYVi>8v3le%1TzEe^`GVFw^Vb4E0nsVYn0d z=p&idhR>!t@sHk|VSqQy(a!lITg%SrZOtYVs>45&fWNn6=yFkMZPsTJEpqoJf&xIG#E{9oij5HjN)bu=- zd*{PdW$xFA8GWFqE$oj(z#@Oe4Oms*h;p&v@%VoK&7_0u&Xii~OVo=B<``xDKHJ|Z zCZ&@@o#WzHEsTgS=4s`xqYGl4iu<_Xs$4=h8y)9a@=vV}rTWJE?_Zfr;x!T`n0+Dt zp`ID}5_7U}%Lvkos$ZD}VhAlWR=$)~uKQ*fst}1KeH%MbSj%1;|KqJE6-_2_(1w<4R8XOI55K-x^&=!cu?wiV! zp1{t@II)T-%PfE4mSg-}A!qtq9P( z1>pN5P|*gFV52R7L_}T(AKU)n;r7WO-^yp!CoTww^6%G2ee|QnjR6Rovkd`f$|lBk zArUz238dXzF>P6^Il+r9JUFFokOn4XUm-WPkY{HA{KDaXc^?)`PHmpArb>GdKm8LU zBf5*!Z-iKnoxV?kT`&L)kAaVd4K!8;>?mNF;|;-7|9hsUMuC-5K-n+i-=yQ?B>)tbk^ji?`5{5zo6{Oy4Prq)?HVQTt{4S{`m8{s^EXI{g^pAn z9e2eLb_8c#C&E6eOq1ZDP`u+lO5yMys=l2xgUa-#N!^1Zfr})CGf#vsAPfAl_q%)RS)baneoZhIpj{N4{tS<3;{#Sg@eDi3n-GwhF;xA z4qhN`%%GGgne+W+)FM*gg*xD^p?VCC5cCu^Dgd4gKOQv)0qz(__TIu|Q3&Vt8q)39 zaofQdNY&o;3KoF<{S01u1$F$BIqP$pXdHBGFOE!jru;VUYE&-lg@NH$b` zAEm|oEFUyg!huHk7zjSbkMSBJl2?V60Jo1h?q{aB4gCE70u4q$vM;GADsUezAW=Qc zRQK=}fl!g`Hxw8;dAbikLrCdB0rWZ%&Z}Zhav{;b`Y2Si7|d9*hk8ne9eYQ>BRR=+jZ{8&A35J_6bZs8Pz1035{U0dMZvI0`p3Q93CHVOXU9 zbontiM}k-smFxW9Z&^qY(LL165y+mv0Q(a)d*Ixzix2f?OcV*TM*nJ&VBrgOt|C?c zuZE&GHkhHf5BOt%%K_@r$N;cfMorV#OCQd{zo#_**rxutSNLim^3Q3jI+G#?OHpbEw}6-bX=4a!^Ffbj2H}XgylUlK6F;H{PX72v(lJ!? z%FHV*6`$#;r)_D2GCV$_Ei`aW8AP ze9XS?c>qRj9ELYz@d)e_|ATnF=D-!I%r>1?X&8^N-0qb(mMmw^09 z{Pe>v3L~sC!IFV>YXB*w!zSz-cWri6mz>CFM_1#sb!X#o*HW}s-JOOEz|THOee^j1*|2_JKVfEt>&SWV7#56{bclZG z^U3`xdZuZz65o=m*qf~zVUH$qGlh@+4&0p3xd{0C?>0rNN zD|+Uy+Q`+umleF(8p^N$lI$KJ^tZ41xMZ|H-^@wfL5`z0!1^h4_#vbx;7c<$#PZ50 zRrZ~~?zT31{qa3%VcuqyyXK6St@|Pl7W?gkPFU**z7v1Wew&u2bXnxerRRKo?^dqY z;3R0WS0k9-xTOmg%NfkFpWvX2$K1%~U{xv_^`}WqpyPQxVjl#NzTeV7Cirvk7D?YO z8eFNTsfjC~zU*l%F4dIE#C;WQ6|e0v-iKtTyBPAzboP=Xf)Qvm8Hht`nX!aJGCKAd zGbktw7IkG@8C!N*Mi(W}!Z;L0#FYa_o+t%`>A=$6sZ$9Ys`QbA$`%tW_;@>y0vb7G zrKZM453_X6IoBHs=J&f(c;tdMznOqkX5+i9t;x}0Ul}H6`tTQpPv^$`3W~ZLMx%$A z(bSps%GU%oTVaFa?7unv|FufVH(3hOOk~x0ZRg9o~HPAf@ zt#!z_^w9mUz1OVOpFdxEvJ7sq3KcGY8gXpH4u*uD%HmjB`M0gr^;gcO8UWxq1oPrn z6P)<~$6pcD!e*5ZD>JlzhfSEVNiot{YjUlA9i{!O&k&H2wsd1Ncf@Yf3l5b%o4i>6 zVbvgh9VAPMVugk{yKDJxKn<0lWQ;we;A&O1(Gn&?RowhEJQ}TRcV`QY&cC3T@!&1{ z=2F*w*EJQpYTvvfLULvk$K|1Wr`3%D-u*3k75&NIe>V2LFG9!4Yxk3K;jQAl)sE7W z2C?%owTAM#=@kK-7pp}w!!D=Kr|S`33`cR)e|+duUOgIalvk(op3_qP#n6>?KI>QF znGa<7jN4UahWXuJMw-~nwiL?gK8x~c@E6?YaH~EKaA5?qM8^X3|}C zA~=0T#IuJ%O?-R$tgq*GNKa!^H-}Tgt4yRqqAjcIJU#sJg>g@hY!YKQ$G%0}pNf(} z2>#98T0;>mIfSttqWq!P^>g3tR0iD#I1}YvFEvztc=Dt~!M6VgZE6Ri<>GVgBa2V4 z?nhC)micmR;g>byH?Pq53>pb- zHl4UfOI(a!AKq4q2DGeS-;pQD78%l~p39eR1UjEnn%Byx{{qJFt-w07 zWvum{A#Kcs%8{6J_lSOLp}ls}15rQis=bLk%bdlbatQ`LbTp~S;ln6Bj`Z)d-%OBi zxg};i!sfXpD3`r82k|)N@yLW!LDmls_M0L~eD2aDBsPu|7k)0#4e;_vNr;@Q)IagC zY9vT*)H|XoE&fc6cuz3N*ebdv?#qK=uZ}RSF9U@l>DSjktS-08IKb~|ziP4L@a}jL z^wzHaZeim??n?gaBb>Bj8g2Y6k7EPNh1f=E7m2f0RVNN$^40ac`A?+SNRN4q3RJD9 zpL;UVZP0fu-{rFrbH?DFDl|4Q}uRz9L^bDy*mV(iw< zD4*LzxVw_Ia= 1.21.0-0 < 1.28.0-0' - catalog.cattle.io/namespace: cis-operator-system - catalog.cattle.io/os: linux - catalog.cattle.io/permits-os: linux,windows - catalog.cattle.io/provides-gvr: cis.cattle.io.clusterscans/v1 - catalog.cattle.io/rancher-version: '>= 2.8.0-0 < 2.9.0-0' - catalog.cattle.io/release-name: rancher-cis-benchmark - catalog.cattle.io/type: cluster-tool - catalog.cattle.io/ui-component: rancher-cis-benchmark -apiVersion: v1 -appVersion: v5.0.0-rc2 -description: The cis-operator enables running CIS benchmark security scans on a kubernetes - cluster -icon: https://charts.rancher.io/assets/logos/cis-kube-bench.svg -keywords: -- security -name: rancher-cis-benchmark -version: 5.0.0-rc2 diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/README.md b/charts/rancher-cis-benchmark/5.0.0-rc2/README.md deleted file mode 100644 index 50beab58b..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/README.md +++ /dev/null @@ -1,9 +0,0 @@ -# Rancher CIS Benchmark Chart - -The cis-operator enables running CIS benchmark security scans on a kubernetes cluster and generate compliance reports that can be downloaded. - -# Installation - -``` -helm install rancher-cis-benchmark ./ --create-namespace -n cis-operator-system -``` diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/app-readme.md b/charts/rancher-cis-benchmark/5.0.0-rc2/app-readme.md deleted file mode 100644 index 147e91ea2..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/app-readme.md +++ /dev/null @@ -1,33 +0,0 @@ -# Rancher CIS Benchmarks - -This chart enables security scanning of the cluster using [CIS (Center for Internet Security) benchmarks](https://www.cisecurity.org/benchmark/kubernetes/). - -For more information on how to use the feature, refer to our [docs](https://rancher.com/docs/rancher/v2.x/en/cis-scans/v2.5/). - -This chart installs the following components: - -- [cis-operator](https://github.com/rancher/cis-operator) - The cis-operator handles launching the [kube-bench](https://github.com/aquasecurity/kube-bench) tool that runs a suite of CIS tests on the nodes of your Kubernetes cluster. After scans finish, the cis-operator generates a compliance report that can be downloaded. -- Scans - A scan is a CRD (`ClusterScan`) that defines when to trigger CIS scans on the cluster based on the defined profile. A report is created after the scan is completed. -- Profiles - A profile is a CRD (`ClusterScanProfile`) that defines the configuration for the CIS scan, which is the benchmark versions to use and any specific tests to skip in that benchmark. This chart installs a few default `ClusterScanProfile` custom resources with no skipped tests, which can immediately be used to launch CIS scans. -- Benchmark Versions - A benchmark version is a CRD (`ClusterScanBenchmark`) that defines the CIS benchmark version to run using kube-bench as well as the valid configuration parameters for that benchmark. This chart installs a few default `ClusterScanBenchmark` custom resources. -- Alerting Resources - Rancher's CIS Benchmark application lets you run a cluster scan on a schedule, and send alerts when scans finish. - - If you want to enable alerts to be delivered when a cluster scan completes, you need to ensure that [Rancher's Monitoring and Alerting](https://rancher.com/docs/rancher/v2.x/en/monitoring-alerting/v2.5/) application is pre-installed and the [Receivers and Routes](https://rancher.com/docs/rancher/v2.x/en/monitoring-alerting/v2.5/configuration/#alertmanager-config) are configured to send out alerts. - - Additionally, you need to set `alerts: true` in the Values YAML while installing or upgrading this chart. - -## Upgrading to Kubernetes v1.25+ - -Starting in Kubernetes v1.25, [Pod Security Policies](https://kubernetes.io/docs/concepts/security/pod-security-policy/) have been removed from the Kubernetes API. - -As a result, **before upgrading to Kubernetes v1.25** (or on a fresh install in a Kubernetes v1.25+ cluster), users are expected to perform an in-place upgrade of this chart with `global.cattle.psp.enabled` set to `false` if it has been previously set to `true`. - -> **Note:** -> In this chart release, any previous field that was associated with any PSP resources have been removed in favor of a single global field: `global.cattle.psp.enabled`. - -> **Note:** -> If you upgrade your cluster to Kubernetes v1.25+ before removing PSPs via a `helm upgrade` (even if you manually clean up resources), **it will leave the Helm release in a broken state within the cluster such that further Helm operations will not work (`helm uninstall`, `helm upgrade`, etc.).** -> -> If your charts get stuck in this state, please consult the Rancher docs on how to clean up your Helm release secrets. - -Upon setting `global.cattle.psp.enabled` to false, the chart will remove any PSP resources deployed on its behalf from the cluster. This is the default setting for this chart. - -As a replacement for PSPs, [Pod Security Admission](https://kubernetes.io/docs/concepts/security/pod-security-admission/) should be used. Please consult the Rancher docs for more details on how to configure your chart release namespaces to work with the new Pod Security Admission and apply Pod Security Standards. diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/_helpers.tpl b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/_helpers.tpl deleted file mode 100644 index b7bb00042..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/_helpers.tpl +++ /dev/null @@ -1,27 +0,0 @@ -{{/* Ensure namespace is set the same everywhere */}} -{{- define "cis.namespace" -}} - {{- .Release.Namespace | default "cis-operator-system" -}} -{{- end -}} - -{{- define "system_default_registry" -}} -{{- if .Values.global.cattle.systemDefaultRegistry -}} -{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}} -{{- else -}} -{{- "" -}} -{{- end -}} -{{- end -}} - -{{/* -Windows cluster will add default taint for linux nodes, -add below linux tolerations to workloads could be scheduled to those linux nodes -*/}} -{{- define "linux-node-tolerations" -}} -- key: "cattle.io/os" - value: "linux" - effect: "NoSchedule" - operator: "Equal" -{{- end -}} - -{{- define "linux-node-selector" -}} -kubernetes.io/os: linux -{{- end -}} diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/alertingrule.yaml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/alertingrule.yaml deleted file mode 100644 index 1787c88a0..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/alertingrule.yaml +++ /dev/null @@ -1,14 +0,0 @@ -{{- if .Values.alerts.enabled -}} ---- -apiVersion: monitoring.coreos.com/v1 -kind: PodMonitor -metadata: - name: rancher-cis-pod-monitor - namespace: {{ template "cis.namespace" . }} -spec: - selector: - matchLabels: - cis.cattle.io/operator: cis-operator - podMetricsEndpoints: - - port: cismetrics -{{- end }} diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-aks-1.0.yaml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-aks-1.0.yaml deleted file mode 100644 index 1ac866253..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-aks-1.0.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: aks-1.0 -spec: - clusterProvider: aks - minKubernetesVersion: "1.15.0" diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-cis-1.20.yaml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-cis-1.20.yaml deleted file mode 100644 index 1203e5bcc..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-cis-1.20.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: cis-1.20 -spec: - clusterProvider: "" - minKubernetesVersion: "1.19.0" - maxKubernetesVersion: "1.21.x" diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-cis-1.23.yaml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-cis-1.23.yaml deleted file mode 100644 index 83002966d..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-cis-1.23.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: cis-1.23 -spec: - clusterProvider: "" - minKubernetesVersion: "1.22.0" - maxKubernetesVersion: "1.23.x" diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-cis-1.24.yaml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-cis-1.24.yaml deleted file mode 100644 index ff00105a5..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-cis-1.24.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: cis-1.24 -spec: - clusterProvider: "" - minKubernetesVersion: "1.24.0" - maxKubernetesVersion: "1.24.x" \ No newline at end of file diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-cis-1.5.yaml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-cis-1.5.yaml deleted file mode 100644 index c9e6075fb..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-cis-1.5.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: cis-1.5 -spec: - clusterProvider: "" - minKubernetesVersion: "1.15.0" - maxKubernetesVersion: "1.15.x" diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-cis-1.6.yaml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-cis-1.6.yaml deleted file mode 100644 index 4f5d66e92..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-cis-1.6.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: cis-1.6 -spec: - clusterProvider: "" - minKubernetesVersion: "1.16.0" - maxKubernetesVersion: "1.18.x" diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-cis-1.7.yaml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-cis-1.7.yaml deleted file mode 100644 index 059040524..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-cis-1.7.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: cis-1.7 -spec: - clusterProvider: "" - minKubernetesVersion: "1.25.0" \ No newline at end of file diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-eks-1.0.1.yaml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-eks-1.0.1.yaml deleted file mode 100644 index d1ba9d295..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-eks-1.0.1.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: eks-1.0.1 -spec: - clusterProvider: eks - minKubernetesVersion: "1.15.0" diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-gke-1.2.0.yaml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-gke-1.2.0.yaml deleted file mode 100644 index 106ff7b0d..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-gke-1.2.0.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: gke-1.2.0 -spec: - clusterProvider: gke - minKubernetesVersion: "1.15.0" \ No newline at end of file diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-k3s-cis-1.20-hardened.yaml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-k3s-cis-1.20-hardened.yaml deleted file mode 100644 index 147cac390..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-k3s-cis-1.20-hardened.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: k3s-cis-1.20-hardened -spec: - clusterProvider: k3s - minKubernetesVersion: "1.19.0" - maxKubernetesVersion: "1.21.x" diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-k3s-cis-1.20-permissive.yaml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-k3s-cis-1.20-permissive.yaml deleted file mode 100644 index d9584f722..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-k3s-cis-1.20-permissive.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: k3s-cis-1.20-permissive -spec: - clusterProvider: k3s - minKubernetesVersion: "1.19.0" - maxKubernetesVersion: "1.21.x" diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-k3s-cis-1.23-hardened.yaml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-k3s-cis-1.23-hardened.yaml deleted file mode 100644 index 1a928db35..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-k3s-cis-1.23-hardened.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: k3s-cis-1.23-hardened -spec: - clusterProvider: k3s - minKubernetesVersion: "1.22.0" - maxKubernetesVersion: "1.23.x" diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-k3s-cis-1.23-permissive.yaml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-k3s-cis-1.23-permissive.yaml deleted file mode 100644 index 5a46787d5..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-k3s-cis-1.23-permissive.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: k3s-cis-1.23-permissive -spec: - clusterProvider: k3s - minKubernetesVersion: "1.22.0" - maxKubernetesVersion: "1.23.x" diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-k3s-cis-1.24-hardened.yaml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-k3s-cis-1.24-hardened.yaml deleted file mode 100644 index 969455914..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-k3s-cis-1.24-hardened.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: k3s-cis-1.24-hardened -spec: - clusterProvider: k3s - minKubernetesVersion: "1.24.0" - maxKubernetesVersion: "1.24.x" \ No newline at end of file diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-k3s-cis-1.24-permissive.yaml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-k3s-cis-1.24-permissive.yaml deleted file mode 100644 index 1e7b48e2c..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-k3s-cis-1.24-permissive.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: k3s-cis-1.24-permissive -spec: - clusterProvider: k3s - minKubernetesVersion: "1.24.0" - maxKubernetesVersion: "1.24.x" \ No newline at end of file diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-k3s-cis-1.6-hardened.yaml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-k3s-cis-1.6-hardened.yaml deleted file mode 100644 index 5160cf795..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-k3s-cis-1.6-hardened.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: k3s-cis-1.6-hardened -spec: - clusterProvider: k3s - minKubernetesVersion: "1.16.0" - maxKubernetesVersion: "1.18.x" diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-k3s-cis-1.6-permissive.yaml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-k3s-cis-1.6-permissive.yaml deleted file mode 100644 index 10c075985..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-k3s-cis-1.6-permissive.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: k3s-cis-1.6-permissive -spec: - clusterProvider: k3s - minKubernetesVersion: "1.16.0" - maxKubernetesVersion: "1.18.x" diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-k3s-cis-1.7-hardened.yaml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-k3s-cis-1.7-hardened.yaml deleted file mode 100644 index 5650be988..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-k3s-cis-1.7-hardened.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: k3s-cis-1.7-hardened -spec: - clusterProvider: k3s - minKubernetesVersion: "1.25.0" \ No newline at end of file diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-k3s-cis-1.7-permissive.yaml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-k3s-cis-1.7-permissive.yaml deleted file mode 100644 index d0facbba1..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-k3s-cis-1.7-permissive.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: k3s-cis-1.7-permissive -spec: - clusterProvider: k3s - minKubernetesVersion: "1.25.0" \ No newline at end of file diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke-cis-1.20-hardened.yaml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke-cis-1.20-hardened.yaml deleted file mode 100644 index 4924679cb..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke-cis-1.20-hardened.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke-cis-1.20-hardened -spec: - clusterProvider: rke - minKubernetesVersion: "1.19.0" - maxKubernetesVersion: "1.21.x" diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke-cis-1.20-permissive.yaml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke-cis-1.20-permissive.yaml deleted file mode 100644 index 2db66d7c6..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke-cis-1.20-permissive.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke-cis-1.20-permissive -spec: - clusterProvider: rke - minKubernetesVersion: "1.19.0" - maxKubernetesVersion: "1.21.x" diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke-cis-1.23-hardened.yaml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke-cis-1.23-hardened.yaml deleted file mode 100644 index 12de23173..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke-cis-1.23-hardened.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke-cis-1.23-hardened -spec: - clusterProvider: rke - minKubernetesVersion: "1.22.0" - maxKubernetesVersion: "1.23.x" diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke-cis-1.23-permissive.yaml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke-cis-1.23-permissive.yaml deleted file mode 100644 index f9d505254..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke-cis-1.23-permissive.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke-cis-1.23-permissive -spec: - clusterProvider: rke - minKubernetesVersion: "1.22.0" - maxKubernetesVersion: "1.23.x" diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke-cis-1.24-hardened.yaml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke-cis-1.24-hardened.yaml deleted file mode 100644 index 34218fe3f..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke-cis-1.24-hardened.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke-cis-1.24-hardened -spec: - clusterProvider: rke - minKubernetesVersion: "1.24.0" - maxKubernetesVersion: "1.24.x" \ No newline at end of file diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke-cis-1.24-permissive.yaml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke-cis-1.24-permissive.yaml deleted file mode 100644 index 7fdf451d2..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke-cis-1.24-permissive.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke-cis-1.24-permissive -spec: - clusterProvider: rke - minKubernetesVersion: "1.24.0" - maxKubernetesVersion: "1.24.x" \ No newline at end of file diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke-cis-1.5-hardened.yaml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke-cis-1.5-hardened.yaml deleted file mode 100644 index b9154f1ad..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke-cis-1.5-hardened.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke-cis-1.5-hardened -spec: - clusterProvider: rke - minKubernetesVersion: "1.15.0" - maxKubernetesVersion: "1.15.x" diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke-cis-1.5-permissive.yaml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke-cis-1.5-permissive.yaml deleted file mode 100644 index 9da65d55d..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke-cis-1.5-permissive.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke-cis-1.5-permissive -spec: - clusterProvider: rke - minKubernetesVersion: "1.15.0" - maxKubernetesVersion: "1.15.x" diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke-cis-1.6-hardened.yaml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke-cis-1.6-hardened.yaml deleted file mode 100644 index 77f8a31df..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke-cis-1.6-hardened.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke-cis-1.6-hardened -spec: - clusterProvider: rke - minKubernetesVersion: "1.16.0" - maxKubernetesVersion: "1.18.x" diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke-cis-1.6-permissive.yaml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke-cis-1.6-permissive.yaml deleted file mode 100644 index 600b8df35..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke-cis-1.6-permissive.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke-cis-1.6-permissive -spec: - clusterProvider: rke - minKubernetesVersion: "1.16.0" - maxKubernetesVersion: "1.18.x" diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke-cis-1.7-hardened.yaml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke-cis-1.7-hardened.yaml deleted file mode 100644 index cb5a72c6b..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke-cis-1.7-hardened.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke-cis-1.7-hardened -spec: - clusterProvider: rke - minKubernetesVersion: "1.25.0" \ No newline at end of file diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke-cis-1.7-permissive.yaml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke-cis-1.7-permissive.yaml deleted file mode 100644 index 6d1782bcc..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke-cis-1.7-permissive.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke-cis-1.7-permissive -spec: - clusterProvider: rke - minKubernetesVersion: "1.25.0" \ No newline at end of file diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke2-cis-1.20-hardened.yaml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke2-cis-1.20-hardened.yaml deleted file mode 100644 index b6cc88359..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke2-cis-1.20-hardened.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke2-cis-1.20-hardened -spec: - clusterProvider: rke2 - minKubernetesVersion: "1.19.0" - maxKubernetesVersion: "1.21.x" diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke2-cis-1.20-permissive.yaml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke2-cis-1.20-permissive.yaml deleted file mode 100644 index fd898bfe8..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke2-cis-1.20-permissive.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke2-cis-1.20-permissive -spec: - clusterProvider: rke2 - minKubernetesVersion: "1.19.0" - maxKubernetesVersion: "1.21.x" diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke2-cis-1.23-hardened.yaml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke2-cis-1.23-hardened.yaml deleted file mode 100644 index 55d96da59..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke2-cis-1.23-hardened.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke2-cis-1.23-hardened -spec: - clusterProvider: rke2 - minKubernetesVersion: "1.22.0" - maxKubernetesVersion: "1.23.x" diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke2-cis-1.23-permissive.yaml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke2-cis-1.23-permissive.yaml deleted file mode 100644 index 55fffe320..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke2-cis-1.23-permissive.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke2-cis-1.23-permissive -spec: - clusterProvider: rke2 - minKubernetesVersion: "1.22.0" - maxKubernetesVersion: "1.23.x" diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke2-cis-1.24-hardened.yaml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke2-cis-1.24-hardened.yaml deleted file mode 100644 index 512d05f5a..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke2-cis-1.24-hardened.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke2-cis-1.24-hardened -spec: - clusterProvider: rke2 - minKubernetesVersion: "1.24.0" - maxKubernetesVersion: "1.24.x" \ No newline at end of file diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke2-cis-1.24-permissive.yaml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke2-cis-1.24-permissive.yaml deleted file mode 100644 index f2ec81ee0..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke2-cis-1.24-permissive.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke2-cis-1.24-permissive -spec: - clusterProvider: rke2 - minKubernetesVersion: "1.24.0" - maxKubernetesVersion: "1.24.x" \ No newline at end of file diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke2-cis-1.5-hardened.yaml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke2-cis-1.5-hardened.yaml deleted file mode 100644 index 20091ec2b..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke2-cis-1.5-hardened.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke2-cis-1.5-hardened -spec: - clusterProvider: rke2 - minKubernetesVersion: "1.15.0" - maxKubernetesVersion: "1.15.x" diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke2-cis-1.5-permissive.yaml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke2-cis-1.5-permissive.yaml deleted file mode 100644 index 9a86906b0..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke2-cis-1.5-permissive.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke2-cis-1.5-permissive -spec: - clusterProvider: rke2 - minKubernetesVersion: "1.15.0" - maxKubernetesVersion: "1.15.x" diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke2-cis-1.6-hardened.yaml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke2-cis-1.6-hardened.yaml deleted file mode 100644 index ea2549ef3..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke2-cis-1.6-hardened.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke2-cis-1.6-hardened -spec: - clusterProvider: rke2 - minKubernetesVersion: "1.16.0" - maxKubernetesVersion: "1.18.x" diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke2-cis-1.6-permissive.yaml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke2-cis-1.6-permissive.yaml deleted file mode 100644 index 0afdaaa19..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke2-cis-1.6-permissive.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke2-cis-1.6-permissive -spec: - clusterProvider: rke2 - minKubernetesVersion: "1.16.0" - maxKubernetesVersion: "1.18.x" diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke2-cis-1.7-hardened.yaml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke2-cis-1.7-hardened.yaml deleted file mode 100644 index 87fa56802..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke2-cis-1.7-hardened.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke2-cis-1.7-hardened -spec: - clusterProvider: rke2 - minKubernetesVersion: "1.25.0" \ No newline at end of file diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke2-cis-1.7-permissive.yaml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke2-cis-1.7-permissive.yaml deleted file mode 100644 index acc35d162..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/benchmark-rke2-cis-1.7-permissive.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke2-cis-1.7-permissive -spec: - clusterProvider: rke2 - minKubernetesVersion: "1.25.0" \ No newline at end of file diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/cis-roles.yaml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/cis-roles.yaml deleted file mode 100644 index 23c93dc65..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/cis-roles.yaml +++ /dev/null @@ -1,49 +0,0 @@ ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - name: cis-admin -rules: - - apiGroups: - - cis.cattle.io - resources: - - clusterscanbenchmarks - - clusterscanprofiles - - clusterscans - - clusterscanreports - verbs: ["create", "update", "delete", "patch","get", "watch", "list"] - - apiGroups: - - catalog.cattle.io - resources: ["apps"] - resourceNames: ["rancher-cis-benchmark"] - verbs: ["get", "watch", "list"] - - apiGroups: - - "" - resources: - - configmaps - verbs: - - '*' ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - name: cis-view -rules: - - apiGroups: - - cis.cattle.io - resources: - - clusterscanbenchmarks - - clusterscanprofiles - - clusterscans - - clusterscanreports - verbs: ["get", "watch", "list"] - - apiGroups: - - catalog.cattle.io - resources: ["apps"] - resourceNames: ["rancher-cis-benchmark"] - verbs: ["get", "watch", "list"] - - apiGroups: - - "" - resources: - - configmaps - verbs: ["get", "watch", "list"] diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/configmap.yaml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/configmap.yaml deleted file mode 100644 index 1b9afc157..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/configmap.yaml +++ /dev/null @@ -1,18 +0,0 @@ -kind: ConfigMap -apiVersion: v1 -metadata: - name: default-clusterscanprofiles - namespace: {{ template "cis.namespace" . }} -data: - # Default ClusterScanProfiles per cluster provider type - rke: |- - <1.21.0: rke-profile-permissive-1.20 - >=1.21.0: rke-profile-permissive-1.7 - rke2: |- - <1.21.0: rke2-cis-1.20-profile-permissive - >=1.21.0: rke2-cis-1.7-profile-permissive - eks: "eks-profile" - gke: "gke-profile" - aks: "aks-profile" - k3s: "k3s-cis-1.7-profile-permissive" - default: "cis-1.7-profile" \ No newline at end of file diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/deployment.yaml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/deployment.yaml deleted file mode 100644 index 8c9f72f5d..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/deployment.yaml +++ /dev/null @@ -1,61 +0,0 @@ -apiVersion: apps/v1 -kind: Deployment -metadata: - name: cis-operator - namespace: {{ template "cis.namespace" . }} - labels: - cis.cattle.io/operator: cis-operator -spec: - selector: - matchLabels: - cis.cattle.io/operator: cis-operator - template: - metadata: - labels: - cis.cattle.io/operator: cis-operator - spec: - serviceAccountName: cis-operator-serviceaccount - containers: - - name: cis-operator - image: '{{ template "system_default_registry" . }}{{ .Values.image.cisoperator.repository }}:{{ .Values.image.cisoperator.tag }}' - imagePullPolicy: IfNotPresent - ports: - - name: cismetrics - containerPort: {{ .Values.alerts.metricsPort }} - env: - - name: SECURITY_SCAN_IMAGE - value: {{ template "system_default_registry" . }}{{ .Values.image.securityScan.repository }} - - name: SECURITY_SCAN_IMAGE_TAG - value: {{ .Values.image.securityScan.tag }} - - name: SONOBUOY_IMAGE - value: {{ template "system_default_registry" . }}{{ .Values.image.sonobuoy.repository }} - - name: SONOBUOY_IMAGE_TAG - value: {{ .Values.image.sonobuoy.tag }} - - name: CIS_ALERTS_METRICS_PORT - value: '{{ .Values.alerts.metricsPort }}' - - name: CIS_ALERTS_SEVERITY - value: {{ .Values.alerts.severity }} - - name: CIS_ALERTS_ENABLED - value: {{ .Values.alerts.enabled | default "false" | quote }} - - name: CLUSTER_NAME - value: '{{ .Values.global.cattle.clusterName }}' - - name: CIS_OPERATOR_DEBUG - value: '{{ .Values.image.cisoperator.debug }}' - {{- if .Values.securityScanJob.overrideTolerations }} - - name: SECURITY_SCAN_JOB_TOLERATIONS - value: '{{ .Values.securityScanJob.tolerations | toJson }}' - {{- end }} - resources: - {{- toYaml .Values.resources | nindent 12 }} - nodeSelector: {{ include "linux-node-selector" . | nindent 8 }} -{{- if .Values.nodeSelector }} -{{ toYaml .Values.nodeSelector | indent 8 }} -{{- end }} - tolerations: {{ include "linux-node-tolerations" . | nindent 8 }} -{{- if .Values.tolerations }} -{{ toYaml .Values.tolerations | indent 8 }} -{{- end }} - {{- with .Values.affinity }} - affinity: - {{- toYaml . | nindent 8 }} - {{- end }} diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/network_policy_allow_all.yaml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/network_policy_allow_all.yaml deleted file mode 100644 index 6ed5d645e..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/network_policy_allow_all.yaml +++ /dev/null @@ -1,15 +0,0 @@ ---- -apiVersion: networking.k8s.io/v1 -kind: NetworkPolicy -metadata: - name: default-allow-all - namespace: {{ template "cis.namespace" . }} -spec: - podSelector: {} - ingress: - - {} - egress: - - {} - policyTypes: - - Ingress - - Egress diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/patch_default_serviceaccount.yaml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/patch_default_serviceaccount.yaml deleted file mode 100644 index e78a6bd08..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/patch_default_serviceaccount.yaml +++ /dev/null @@ -1,29 +0,0 @@ ---- -apiVersion: batch/v1 -kind: Job -metadata: - name: patch-sa - annotations: - "helm.sh/hook": post-install, post-upgrade - "helm.sh/hook-delete-policy": hook-succeeded, before-hook-creation -spec: - template: - spec: - serviceAccountName: cis-operator-serviceaccount - nodeSelector: {{ include "linux-node-selector" . | nindent 8 }} -{{- if .Values.nodeSelector }} -{{ toYaml .Values.nodeSelector | indent 8 }} -{{- end }} - tolerations: {{ include "linux-node-tolerations" . | nindent 8 }} -{{- if .Values.tolerations }} -{{ toYaml .Values.tolerations | indent 8 }} -{{- end }} - restartPolicy: Never - containers: - - name: sa - image: "{{ template "system_default_registry" . }}{{ .Values.global.kubectl.repository }}:{{ .Values.global.kubectl.tag }}" - imagePullPolicy: {{ .Values.global.imagePullPolicy }} - command: ["kubectl", "patch", "serviceaccount", "default", "-p", "{\"automountServiceAccountToken\": false}"] - args: ["-n", {{ template "cis.namespace" . }}] - - backoffLimit: 1 diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/psp.yaml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/psp.yaml deleted file mode 100644 index 9b8a5995e..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/psp.yaml +++ /dev/null @@ -1,59 +0,0 @@ -{{- if .Values.global.cattle.psp.enabled }} -apiVersion: policy/v1beta1 -kind: PodSecurityPolicy -metadata: - name: cis-psp -spec: - allowPrivilegeEscalation: true - allowedCapabilities: - - '*' - fsGroup: - rule: RunAsAny - hostIPC: true - hostNetwork: true - hostPID: true - hostPorts: - - max: 65535 - min: 0 - privileged: true - runAsUser: - rule: RunAsAny - seLinux: - rule: RunAsAny - supplementalGroups: - rule: RunAsAny - volumes: - - '*' ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - name: cis-psp-role - namespace: {{ template "cis.namespace" . }} -rules: -- apiGroups: - - policy - resourceNames: - - cis-psp - resources: - - podsecuritypolicies - verbs: - - use ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - name: cis-psp-rolebinding - namespace: {{ template "cis.namespace" . }} -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: cis-psp-role -subjects: -- kind: ServiceAccount - name: cis-serviceaccount - namespace: {{ template "cis.namespace" . }} -- kind: ServiceAccount - name: cis-operator-serviceaccount - namespace: {{ template "cis.namespace" . }} -{{- end }} diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/rbac.yaml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/rbac.yaml deleted file mode 100644 index 6352b972a..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/rbac.yaml +++ /dev/null @@ -1,213 +0,0 @@ -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - labels: - app.kubernetes.io/name: rancher-cis-benchmark - app.kubernetes.io/instance: release-name - name: cis-operator-clusterrole -rules: -- apiGroups: - - "cis.cattle.io" - resources: - - "*" - verbs: - - "*" -- apiGroups: - - "" - resources: - - "pods" - - "services" - - "configmaps" - - "nodes" - - "serviceaccounts" - verbs: - - "get" - - "list" - - "create" - - "update" - - "watch" - - "patch" -- apiGroups: - - "rbac.authorization.k8s.io" - resources: - - "rolebindings" - - "clusterrolebindings" - - "clusterroles" - verbs: - - "get" - - "list" -- apiGroups: - - "batch" - resources: - - "jobs" - verbs: - - "list" - - "create" - - "patch" - - "update" - - "watch" ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - labels: - app.kubernetes.io/name: rancher-cis-benchmark - app.kubernetes.io/instance: release-name - name: cis-scan-ns -rules: -{{- if .Values.global.cattle.psp.enabled }} -- apiGroups: - - "*" - resources: - - "podsecuritypolicies" - verbs: - - "get" - - "list" - - "watch" -{{- end }} -- apiGroups: - - "" - resources: - - "namespaces" - - "nodes" - - "pods" - - "serviceaccounts" - - "services" - - "replicationcontrollers" - verbs: - - "get" - - "list" - - "watch" -- apiGroups: - - "rbac.authorization.k8s.io" - resources: - - "rolebindings" - - "clusterrolebindings" - - "clusterroles" - verbs: - - "get" - - "list" -- apiGroups: - - "batch" - resources: - - "jobs" - - "cronjobs" - verbs: - - "list" -- apiGroups: - - "apps" - resources: - - "daemonsets" - - "deployments" - - "replicasets" - - "statefulsets" - verbs: - - "list" -- apiGroups: - - "autoscaling" - resources: - - "horizontalpodautoscalers" - verbs: - - "list" -- apiGroups: - - "networking.k8s.io" - resources: - - "networkpolicies" - verbs: - - "get" - - "list" - - "watch" ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - name: cis-operator-role - labels: - app.kubernetes.io/name: rancher-cis-benchmark - app.kubernetes.io/instance: release-name - namespace: {{ template "cis.namespace" . }} -rules: -- apiGroups: - - "" - resources: - - "services" - verbs: - - "watch" - - "list" - - "get" - - "patch" -- apiGroups: - - "batch" - resources: - - "jobs" - verbs: - - "watch" - - "list" - - "get" - - "delete" -- apiGroups: - - "" - resources: - - "configmaps" - - "pods" - - "secrets" - verbs: - - "*" -- apiGroups: - - "apps" - resources: - - "daemonsets" - verbs: - - "*" ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - labels: - app.kubernetes.io/name: rancher-cis-benchmark - app.kubernetes.io/instance: release-name - name: cis-operator-clusterrolebinding -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: cis-operator-clusterrole -subjects: -- kind: ServiceAccount - name: cis-operator-serviceaccount - namespace: {{ template "cis.namespace" . }} ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - name: cis-scan-ns - labels: - app.kubernetes.io/name: rancher-cis-benchmark - app.kubernetes.io/instance: release-name -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: cis-scan-ns -subjects: -- kind: ServiceAccount - name: cis-serviceaccount - namespace: {{ template "cis.namespace" . }} ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - labels: - app.kubernetes.io/name: rancher-cis-benchmark - app.kubernetes.io/instance: release-name - name: cis-operator-rolebinding - namespace: {{ template "cis.namespace" . }} -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: cis-operator-role -subjects: -- kind: ServiceAccount - name: cis-serviceaccount - namespace: {{ template "cis.namespace" . }} -- kind: ServiceAccount - name: cis-operator-serviceaccount - namespace: {{ template "cis.namespace" . }} diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-cis-1.20.yaml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-cis-1.20.yaml deleted file mode 100644 index 05263ce7d..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-cis-1.20.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: cis-1.20-profile - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: cis-1.20 diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-cis-1.23.yaml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-cis-1.23.yaml deleted file mode 100644 index c59d8f51f..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-cis-1.23.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: cis-1.23-profile - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: cis-1.23 diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-cis-1.24.yaml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-cis-1.24.yaml deleted file mode 100644 index dcc38c9a9..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-cis-1.24.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: cis-1.24-profile - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: cis-1.24 \ No newline at end of file diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-cis-1.6.yaml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-cis-1.6.yaml deleted file mode 100644 index 8a8d8bf88..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-cis-1.6.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: cis-1.6-profile - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: cis-1.6 diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-cis-1.7.yaml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-cis-1.7.yaml deleted file mode 100644 index edac79e2a..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-cis-1.7.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: cis-1.7-profile - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: cis-1.7 \ No newline at end of file diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-k3s-cis-1.20-hardened.yml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-k3s-cis-1.20-hardened.yml deleted file mode 100644 index a0b6cb6f6..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-k3s-cis-1.20-hardened.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: k3s-cis-1.20-profile-hardened - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: k3s-cis-1.20-hardened diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-k3s-cis-1.20-permissive.yml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-k3s-cis-1.20-permissive.yml deleted file mode 100644 index 89885548d..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-k3s-cis-1.20-permissive.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: k3s-cis-1.20-profile-permissive - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: k3s-cis-1.20-permissive diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-k3s-cis-1.23-hardened.yml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-k3s-cis-1.23-hardened.yml deleted file mode 100644 index 724412d3a..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-k3s-cis-1.23-hardened.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: k3s-cis-1.23-profile-hardened - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: k3s-cis-1.23-hardened diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-k3s-cis-1.23-permissive.yml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-k3s-cis-1.23-permissive.yml deleted file mode 100644 index 9f9213de1..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-k3s-cis-1.23-permissive.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: k3s-cis-1.23-profile-permissive - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: k3s-cis-1.23-permissive diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-k3s-cis-1.24-hardened.yml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-k3s-cis-1.24-hardened.yml deleted file mode 100644 index 4360d1145..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-k3s-cis-1.24-hardened.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: k3s-cis-1.24-profile-hardened - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: k3s-cis-1.24-hardened \ No newline at end of file diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-k3s-cis-1.24-permissive.yml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-k3s-cis-1.24-permissive.yml deleted file mode 100644 index 09a5aca05..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-k3s-cis-1.24-permissive.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: k3s-cis-1.24-profile-permissive - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: k3s-cis-1.24-permissive \ No newline at end of file diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-k3s-cis-1.6-hardened.yml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-k3s-cis-1.6-hardened.yml deleted file mode 100644 index 095e977ab..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-k3s-cis-1.6-hardened.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: k3s-cis-1.6-profile-hardened - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: k3s-cis-1.6-hardened diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-k3s-cis-1.6-permissive.yml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-k3s-cis-1.6-permissive.yml deleted file mode 100644 index 3b22a80c8..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-k3s-cis-1.6-permissive.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: k3s-cis-1.6-profile-permissive - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: k3s-cis-1.6-permissive diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-k3s-cis-1.7-hardened.yml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-k3s-cis-1.7-hardened.yml deleted file mode 100644 index 51fd6baf0..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-k3s-cis-1.7-hardened.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: k3s-cis-1.7-profile-hardened - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: k3s-cis-1.7-hardened \ No newline at end of file diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-k3s-cis-1.7-permissive.yml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-k3s-cis-1.7-permissive.yml deleted file mode 100644 index 0c1baf774..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-k3s-cis-1.7-permissive.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: k3s-cis-1.7-profile-permissive - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: k3s-cis-1.7-permissive \ No newline at end of file diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke-1.20-hardened.yaml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke-1.20-hardened.yaml deleted file mode 100644 index c36cf38c9..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke-1.20-hardened.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: rke-profile-hardened-1.20 - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: rke-cis-1.20-hardened diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke-1.20-permissive.yaml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke-1.20-permissive.yaml deleted file mode 100644 index cfeb4b34c..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke-1.20-permissive.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: rke-profile-permissive-1.20 - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: rke-cis-1.20-permissive diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke-1.23-hardened.yaml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke-1.23-hardened.yaml deleted file mode 100644 index 007331149..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke-1.23-hardened.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: rke-profile-hardened-1.23 - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: rke-cis-1.23-hardened diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke-1.23-permissive.yaml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke-1.23-permissive.yaml deleted file mode 100644 index 085b60dfa..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke-1.23-permissive.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: rke-profile-permissive-1.23 - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: rke-cis-1.23-permissive diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke-1.24-hardened.yaml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke-1.24-hardened.yaml deleted file mode 100644 index b312d3fb0..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke-1.24-hardened.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: rke-profile-hardened-1.24 - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: rke-cis-1.24-hardened \ No newline at end of file diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke-1.24-permissive.yaml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke-1.24-permissive.yaml deleted file mode 100644 index e35211c78..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke-1.24-permissive.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: rke-profile-permissive-1.24 - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: rke-cis-1.24-permissive \ No newline at end of file diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke-1.6-hardened.yaml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke-1.6-hardened.yaml deleted file mode 100644 index d38febd80..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke-1.6-hardened.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: rke-profile-hardened-1.6 - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: rke-cis-1.6-hardened diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke-1.6-permissive.yaml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke-1.6-permissive.yaml deleted file mode 100644 index d31b5b0d2..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke-1.6-permissive.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: rke-profile-permissive-1.6 - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: rke-cis-1.6-permissive diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke-1.7-hardened.yaml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke-1.7-hardened.yaml deleted file mode 100644 index e488eaedf..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke-1.7-hardened.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: rke-profile-hardened-1.7 - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: rke-cis-1.7-hardened \ No newline at end of file diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke-1.7-permissive.yaml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke-1.7-permissive.yaml deleted file mode 100644 index 8e6df750d..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke-1.7-permissive.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: rke-profile-permissive-1.7 - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: rke-cis-1.7-permissive \ No newline at end of file diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke2-cis-1.20-hardened.yml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke2-cis-1.20-hardened.yml deleted file mode 100644 index decc9b651..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke2-cis-1.20-hardened.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: rke2-cis-1.20-profile-hardened - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: rke2-cis-1.20-hardened diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke2-cis-1.20-permissive.yml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke2-cis-1.20-permissive.yml deleted file mode 100644 index 74c96ffc4..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke2-cis-1.20-permissive.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: rke2-cis-1.20-profile-permissive - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: rke2-cis-1.20-permissive diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke2-cis-1.23-hardened.yml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke2-cis-1.23-hardened.yml deleted file mode 100644 index abc1c2a21..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke2-cis-1.23-hardened.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: rke2-cis-1.23-profile-hardened - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: rke2-cis-1.23-hardened diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke2-cis-1.23-permissive.yml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke2-cis-1.23-permissive.yml deleted file mode 100644 index 51cc519ac..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke2-cis-1.23-permissive.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: rke2-cis-1.23-profile-permissive - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: rke2-cis-1.23-permissive diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke2-cis-1.24-hardened.yml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke2-cis-1.24-hardened.yml deleted file mode 100644 index 412190d1d..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke2-cis-1.24-hardened.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: rke2-cis-1.24-profile-hardened - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: rke2-cis-1.24-hardened \ No newline at end of file diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke2-cis-1.24-permissive.yml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke2-cis-1.24-permissive.yml deleted file mode 100644 index 3079ba2fe..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke2-cis-1.24-permissive.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: rke2-cis-1.24-profile-permissive - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: rke2-cis-1.24-permissive \ No newline at end of file diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke2-cis-1.6-hardened.yml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke2-cis-1.6-hardened.yml deleted file mode 100644 index c7ac7f949..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke2-cis-1.6-hardened.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: rke2-cis-1.6-profile-hardened - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: rke2-cis-1.6-hardened diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke2-cis-1.6-permissive.yml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke2-cis-1.6-permissive.yml deleted file mode 100644 index 96ca1345a..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke2-cis-1.6-permissive.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: rke2-cis-1.6-profile-permissive - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: rke2-cis-1.6-permissive diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke2-cis-1.7-hardened.yml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke2-cis-1.7-hardened.yml deleted file mode 100644 index 9e90d769a..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke2-cis-1.7-hardened.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: rke2-cis-1.7-profile-hardened - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: rke2-cis-1.7-hardened \ No newline at end of file diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke2-cis-1.7-permissive.yml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke2-cis-1.7-permissive.yml deleted file mode 100644 index 4363d3afa..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofile-rke2-cis-1.7-permissive.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: rke2-cis-1.7-profile-permissive - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: rke2-cis-1.7-permissive \ No newline at end of file diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofileaks.yml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofileaks.yml deleted file mode 100644 index ea7b25b40..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofileaks.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: aks-profile - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: aks-1.0 \ No newline at end of file diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofileeks.yml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofileeks.yml deleted file mode 100644 index 3b4e34437..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofileeks.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: eks-profile - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: eks-1.0.1 \ No newline at end of file diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofilegke.yml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofilegke.yml deleted file mode 100644 index 3e5e2439a..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/scanprofilegke.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: gke-profile - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: gke-1.2.0 \ No newline at end of file diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/serviceaccount.yaml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/serviceaccount.yaml deleted file mode 100644 index ec48ec622..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/serviceaccount.yaml +++ /dev/null @@ -1,14 +0,0 @@ -apiVersion: v1 -kind: ServiceAccount -metadata: - namespace: {{ template "cis.namespace" . }} - name: cis-operator-serviceaccount ---- -apiVersion: v1 -kind: ServiceAccount -metadata: - namespace: {{ template "cis.namespace" . }} - labels: - app.kubernetes.io/name: rancher-cis-benchmark - app.kubernetes.io/instance: release-name - name: cis-serviceaccount diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/validate-install-crd.yaml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/validate-install-crd.yaml deleted file mode 100644 index 562295791..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/validate-install-crd.yaml +++ /dev/null @@ -1,17 +0,0 @@ -#{{- if gt (len (lookup "rbac.authorization.k8s.io/v1" "ClusterRole" "" "")) 0 -}} -# {{- $found := dict -}} -# {{- set $found "cis.cattle.io/v1/ClusterScan" false -}} -# {{- set $found "cis.cattle.io/v1/ClusterScanBenchmark" false -}} -# {{- set $found "cis.cattle.io/v1/ClusterScanProfile" false -}} -# {{- set $found "cis.cattle.io/v1/ClusterScanReport" false -}} -# {{- range .Capabilities.APIVersions -}} -# {{- if hasKey $found (toString .) -}} -# {{- set $found (toString .) true -}} -# {{- end -}} -# {{- end -}} -# {{- range $_, $exists := $found -}} -# {{- if (eq $exists false) -}} -# {{- required "Required CRDs are missing. Please install the corresponding CRD chart before installing this chart." "" -}} -# {{- end -}} -# {{- end -}} -#{{- end -}} \ No newline at end of file diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/validate-psp-install.yaml b/charts/rancher-cis-benchmark/5.0.0-rc2/templates/validate-psp-install.yaml deleted file mode 100644 index a30c59d3b..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/templates/validate-psp-install.yaml +++ /dev/null @@ -1,7 +0,0 @@ -#{{- if gt (len (lookup "rbac.authorization.k8s.io/v1" "ClusterRole" "" "")) 0 -}} -#{{- if .Values.global.cattle.psp.enabled }} -#{{- if not (.Capabilities.APIVersions.Has "policy/v1beta1/PodSecurityPolicy") }} -#{{- fail "The target cluster does not have the PodSecurityPolicy API resource. Please disable PSPs in this chart before proceeding." -}} -#{{- end }} -#{{- end }} -#{{- end }} diff --git a/charts/rancher-cis-benchmark/5.0.0-rc2/values.yaml b/charts/rancher-cis-benchmark/5.0.0-rc2/values.yaml deleted file mode 100644 index 4f337e447..000000000 --- a/charts/rancher-cis-benchmark/5.0.0-rc2/values.yaml +++ /dev/null @@ -1,55 +0,0 @@ -# Default values for rancher-cis-benchmark. -# This is a YAML-formatted file. -# Declare variables to be passed into your templates. - -image: - cisoperator: - repository: rancher/cis-operator - tag: v1.0.12 - securityScan: - repository: rancher/security-scan - tag: v0.2.13 - sonobuoy: - repository: rancher/mirrored-sonobuoy-sonobuoy - tag: v0.56.16 - -resources: {} - # We usually recommend not to specify default resources and to leave this as a conscious - # choice for the user. This also increases chances charts run on environments with little - # resources, such as Minikube. If you do want to specify resources, uncomment the following - # lines, adjust them as necessary, and remove the curly braces after 'resources:'. - # limits: - # cpu: 100m - # memory: 128Mi - # requests: - # cpu: 100m - # memory: 128Mi - -## Node labels for pod assignment -## Ref: https://kubernetes.io/docs/user-guide/node-selection/ -## -nodeSelector: {} - -## List of node taints to tolerate (requires Kubernetes >= 1.6) -tolerations: [] - -securityScanJob: - overrideTolerations: false - tolerations: [] - -affinity: {} - -global: - cattle: - systemDefaultRegistry: "" - clusterName: "" - psp: - enabled: false - kubectl: - repository: rancher/kubectl - tag: v1.28.1 - -alerts: - enabled: false - severity: warning - metricsPort: 8080 diff --git a/index.yaml b/index.yaml index e364458b8..1c95a6f81 100755 --- a/index.yaml +++ b/index.yaml @@ -6914,32 +6914,6 @@ entries: - assets/rancher-backup-crd/rancher-backup-crd-1.0.200.tgz version: 1.0.200 rancher-cis-benchmark: - - annotations: - catalog.cattle.io/auto-install: rancher-cis-benchmark-crd=match - catalog.cattle.io/certified: rancher - catalog.cattle.io/display-name: CIS Benchmark - catalog.cattle.io/kube-version: '>= 1.21.0-0 < 1.28.0-0' - catalog.cattle.io/namespace: cis-operator-system - catalog.cattle.io/os: linux - catalog.cattle.io/permits-os: linux,windows - catalog.cattle.io/provides-gvr: cis.cattle.io.clusterscans/v1 - catalog.cattle.io/rancher-version: '>= 2.8.0-0 < 2.9.0-0' - catalog.cattle.io/release-name: rancher-cis-benchmark - catalog.cattle.io/type: cluster-tool - catalog.cattle.io/ui-component: rancher-cis-benchmark - apiVersion: v1 - appVersion: v5.0.0-rc2 - created: "2023-09-15T13:17:17.583489166+05:30" - description: The cis-operator enables running CIS benchmark security scans on - a kubernetes cluster - digest: 777d0ee9d0243b79aaf597c05992e06f0f25a2cffd6298ac02c39f7bf82971db - icon: https://charts.rancher.io/assets/logos/cis-kube-bench.svg - keywords: - - security - name: rancher-cis-benchmark - urls: - - assets/rancher-cis-benchmark/rancher-cis-benchmark-5.0.0-rc2.tgz - version: 5.0.0-rc2 - annotations: catalog.cattle.io/auto-install: rancher-cis-benchmark-crd=match catalog.cattle.io/certified: rancher @@ -7410,20 +7384,6 @@ entries: - assets/rancher-cis-benchmark/rancher-cis-benchmark-1.0.100.tgz version: 1.0.100 rancher-cis-benchmark-crd: - - annotations: - catalog.cattle.io/certified: rancher - catalog.cattle.io/hidden: "true" - catalog.cattle.io/namespace: cis-operator-system - catalog.cattle.io/release-name: rancher-cis-benchmark-crd - apiVersion: v1 - created: "2023-09-15T13:17:17.588286957+05:30" - description: Installs the CRDs for rancher-cis-benchmark. - digest: 8938ba2d3ba3fdb5be774585b60ca6258258dbbe1526a5159be606a7a0ec9dda - name: rancher-cis-benchmark-crd - type: application - urls: - - assets/rancher-cis-benchmark-crd/rancher-cis-benchmark-crd-5.0.0-rc2.tgz - version: 5.0.0-rc2 - annotations: catalog.cattle.io/certified: rancher catalog.cattle.io/hidden: "true"