From 3e5d7647c666f72f2eeba06b22977d9e0aeac411 Mon Sep 17 00:00:00 2001 From: Prachi Damle Date: Mon, 28 Mar 2022 16:44:01 -0700 Subject: [PATCH] make remove --- .../rancher-cis-benchmark-crd-2.0.3-rc2.tgz | Bin 1467 -> 0 bytes .../rancher-cis-benchmark-2.0.3-rc2.tgz | Bin 5311 -> 0 bytes .../2.0.3-rc2/Chart.yaml | 10 -- .../2.0.3-rc2/README.md | 2 - .../2.0.3-rc2/templates/clusterscan.yaml | 148 ------------------ .../templates/clusterscanbenchmark.yaml | 54 ------- .../templates/clusterscanprofile.yaml | 36 ----- .../templates/clusterscanreport.yaml | 39 ----- .../2.0.3-rc2/Chart.yaml | 22 --- .../rancher-cis-benchmark/2.0.3-rc2/README.md | 9 -- .../2.0.3-rc2/app-readme.md | 15 -- .../2.0.3-rc2/templates/_helpers.tpl | 27 ---- .../2.0.3-rc2/templates/alertingrule.yaml | 14 -- .../templates/benchmark-aks-1.0.yaml | 8 - .../templates/benchmark-cis-1.5.yaml | 8 - .../templates/benchmark-cis-1.6.yaml | 8 - .../templates/benchmark-eks-1.0.yaml | 8 - .../templates/benchmark-gke-1.0.yaml | 8 - .../benchmark-k3s-cis-1.6-hardened.yaml | 8 - .../benchmark-k3s-cis-1.6-permissive.yaml | 8 - .../benchmark-rke-cis-1.5-hardened.yaml | 8 - .../benchmark-rke-cis-1.5-permissive.yaml | 8 - .../benchmark-rke-cis-1.6-hardened.yaml | 8 - .../benchmark-rke-cis-1.6-permissive.yaml | 8 - .../benchmark-rke2-cis-1.5-hardened.yaml | 8 - .../benchmark-rke2-cis-1.5-permissive.yaml | 8 - .../benchmark-rke2-cis-1.6-hardened.yaml | 8 - .../benchmark-rke2-cis-1.6-permissive.yaml | 8 - .../2.0.3-rc2/templates/cis-roles.yaml | 49 ------ .../2.0.3-rc2/templates/configmap.yaml | 18 --- .../2.0.3-rc2/templates/deployment.yaml | 55 ------- .../templates/network_policy_allow_all.yaml | 15 -- .../patch_default_serviceaccount.yaml | 29 ---- .../2.0.3-rc2/templates/rbac.yaml | 43 ----- .../templates/scanprofile-cis-1.5.yml | 9 -- .../templates/scanprofile-cis-1.6.yaml | 9 -- .../scanprofile-k3s-cis-1.6-hardened.yml | 9 -- .../scanprofile-k3s-cis-1.6-permissive.yml | 9 -- .../scanprofile-rke-1.5-hardened.yml | 9 -- .../scanprofile-rke-1.5-permissive.yml | 9 -- .../scanprofile-rke-1.6-hardened.yaml | 9 -- .../scanprofile-rke-1.6-permissive.yaml | 9 -- .../scanprofile-rke2-cis-1.5-hardened.yml | 9 -- .../scanprofile-rke2-cis-1.5-permissive.yml | 9 -- .../scanprofile-rke2-cis-1.6-hardened.yml | 9 -- .../scanprofile-rke2-cis-1.6-permissive.yml | 9 -- .../2.0.3-rc2/templates/scanprofileaks.yml | 9 -- .../2.0.3-rc2/templates/scanprofileeks.yml | 9 -- .../2.0.3-rc2/templates/scanprofilegke.yml | 9 -- .../2.0.3-rc2/templates/serviceaccount.yaml | 14 -- .../templates/validate-install-crd.yaml | 17 -- .../2.0.3-rc2/values.yaml | 49 ------ index.yaml | 40 ----- 53 files changed, 960 deletions(-) delete mode 100644 assets/rancher-cis-benchmark-crd/rancher-cis-benchmark-crd-2.0.3-rc2.tgz delete mode 100644 assets/rancher-cis-benchmark/rancher-cis-benchmark-2.0.3-rc2.tgz delete mode 100644 charts/rancher-cis-benchmark-crd/2.0.3-rc2/Chart.yaml delete mode 100644 charts/rancher-cis-benchmark-crd/2.0.3-rc2/README.md delete mode 100644 charts/rancher-cis-benchmark-crd/2.0.3-rc2/templates/clusterscan.yaml delete mode 100644 charts/rancher-cis-benchmark-crd/2.0.3-rc2/templates/clusterscanbenchmark.yaml delete mode 100644 charts/rancher-cis-benchmark-crd/2.0.3-rc2/templates/clusterscanprofile.yaml delete mode 100644 charts/rancher-cis-benchmark-crd/2.0.3-rc2/templates/clusterscanreport.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc2/Chart.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc2/README.md delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc2/app-readme.md delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc2/templates/_helpers.tpl delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc2/templates/alertingrule.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc2/templates/benchmark-aks-1.0.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc2/templates/benchmark-cis-1.5.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc2/templates/benchmark-cis-1.6.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc2/templates/benchmark-eks-1.0.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc2/templates/benchmark-gke-1.0.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc2/templates/benchmark-k3s-cis-1.6-hardened.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc2/templates/benchmark-k3s-cis-1.6-permissive.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc2/templates/benchmark-rke-cis-1.5-hardened.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc2/templates/benchmark-rke-cis-1.5-permissive.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc2/templates/benchmark-rke-cis-1.6-hardened.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc2/templates/benchmark-rke-cis-1.6-permissive.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc2/templates/benchmark-rke2-cis-1.5-hardened.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc2/templates/benchmark-rke2-cis-1.5-permissive.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc2/templates/benchmark-rke2-cis-1.6-hardened.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc2/templates/benchmark-rke2-cis-1.6-permissive.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc2/templates/cis-roles.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc2/templates/configmap.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc2/templates/deployment.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc2/templates/network_policy_allow_all.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc2/templates/patch_default_serviceaccount.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc2/templates/rbac.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc2/templates/scanprofile-cis-1.5.yml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc2/templates/scanprofile-cis-1.6.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc2/templates/scanprofile-k3s-cis-1.6-hardened.yml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc2/templates/scanprofile-k3s-cis-1.6-permissive.yml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc2/templates/scanprofile-rke-1.5-hardened.yml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc2/templates/scanprofile-rke-1.5-permissive.yml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc2/templates/scanprofile-rke-1.6-hardened.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc2/templates/scanprofile-rke-1.6-permissive.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc2/templates/scanprofile-rke2-cis-1.5-hardened.yml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc2/templates/scanprofile-rke2-cis-1.5-permissive.yml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc2/templates/scanprofile-rke2-cis-1.6-hardened.yml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc2/templates/scanprofile-rke2-cis-1.6-permissive.yml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc2/templates/scanprofileaks.yml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc2/templates/scanprofileeks.yml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc2/templates/scanprofilegke.yml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc2/templates/serviceaccount.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc2/templates/validate-install-crd.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc2/values.yaml diff --git a/assets/rancher-cis-benchmark-crd/rancher-cis-benchmark-crd-2.0.3-rc2.tgz b/assets/rancher-cis-benchmark-crd/rancher-cis-benchmark-crd-2.0.3-rc2.tgz deleted file mode 100644 index dde886866f8d1acb172b49741e8a2b9321995b50..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1467 zcmV;s1w{HEiwG0|00000|0w_~VMtOiV@ORlOnEsqVl!4SWK%V1T2nbTPgYhoO;>Dc zVQyr3R8em|NM&qo0PI>(bDOvp&a;1oruW$tu#?{LTk7`S>FzeoIN9#=u{g2SfW%0L zY&|>s-**Hg1`Nj7*y&DvUObk>cO>}EcccRvBwwN)a$$yZlzbV1ejIWgyqzvVle2;- zyg1NY*LAPP5nhGvG2LQJ0AJoh3j3pm!k{j9_n}(OALX&a1ZuXUEIIK zKuSeGLP;|jFvfu(R11d#QHYLEZ#ilb4+4V;%ehiJY$<{O<%GQstP z%Qh9G22y%xR)#RDy+mV(U~p(Jeeu7^)d9rfD{3Q@oUkWv5TM~&#FYO3Bn?3r8b(WG z)7b~Z9+a-fat3XVXcgmxK^%vIr+01e^z7GnTxT@Y+#kI5Gwou{@lP1VArP9kJWLFs zHXP($daynIJ=gcVa{T+=Xyl&b{}fh?9Eb&eCzSS|aUTC`YzRJigGV8Q37aN{R5U}Q z63y`gJ_sq&2#Am%00OHYS^N|TV;nBbI-&h?l{P_ zH4YOEVcEriF~gM&%zX5Ku{O%p`{a4491j@Zr2T+fF3}Ur}V#dLnk2fDB=>(-MXO@(4U}X3Fwb? zLnk1q=sHvTd02j&H;ULs*G||uSMEiGh9D}h__zAb7T_4UWB3w-B*efnY^vmgSU6lO zd6&1B$++3E;ldbov2^03$-`Nnp#0Z`{RgCib_S4tVU8$L|Slet*VvUnt zoNK|_>c?e{N`Y1FW=tkwXdgr&ii@_fxFYn%ed`S0JaKEqr%>153g5Bj`hA%ffvW+f-l2VrF+ z)chNAY9LT;r{PMY6&N9Fn1eEjHd}|RpuWZCf|jmrUvf80IuGImXGHAs^pTa9kw+YWKk8q%4+-{SxXkMAo& zW9%;Is7^G3QS!Jx>e$`4k95EhJ#3Ytoq__ihE=665GD>`)pK@3t(D%EaGEuDE9VZ+ ziIxdR1E&`qsFi)zy8JEAxc)TJr#x2opnYPid3MD5KT6bTm1Glr+g2psd-qIJn^^bT z7M0Eb`$5=bzvrIpQPez~U9L<|iu+w^k5Btt*+}Wyj#A@m7eang>sbF=mr6Sn0$b|; z{=4y2rT#baeeYcVJB1y){`W$d9t(l*pE1+!nu_4s>FbsTW8_Xgty`_0MDQY+rHWvs zZ--J(B;>Ej9JNG3lRv)_^5^COyTHTu7Wn1?JHYdlNiR<^E4h4zc%x#v!@vXGrSGG5 z_E{YLLs!cxr0exuz2*L#%1`zdu}5chgzpu|cC$R+Iam9rmC3em?X{b$R^uGegq^)bE#O^lX6Ol*8kn-~n(eAVDc zVQyr3R8em|NM&qo0PKDLZreJtfB*gZDF)7d(e@ycf5py$anAxdY3?F-o1P-+?&6?( zkTTNP=2|9Il8VwNq03U8d)NT7=QSrHb>7|wsT-KN`dgx9Y5C_O<#W$u3(;X?la zGIAH71Q9Vt+0YD(v;>goMS`js7~uhDKtK-+!BC;;3EPeu^)&a9QlacO8lKi~(v53v zhPjleWFz21E*rW6W_X!`TzNmNjd3>R!k7J;lNMTgO0;Q5%^UjMSTCYt{eMq_2<5&E zz#9GE?sQJ``oG(2SNgvUI)ZmNAW@*e_Bjl=C?3&n?Fc@Ns01p3z^`Xl@0|e`6QUIQ zFrWeI1nhEvmRyFCL~0LdA@i}-9c zmkAYu3-p~NX?n51vfFXnwVFW5BjKU!!^2|@;0XSP5Xp!H!3+d?d@@1i1LI1|O@`>v z!3_Mkhtk|Yn6DEANbV7o?i8Xs#p6tRlto93t;9l;0gBLw6Q z0}G>&`#_|mLnB0;;u;5YBQ&>D#{J=*Z0J66h7t9#!MKl(!~i{Q7#p>tqnf^TWA1Qa z29Rd?o=OFL0Qw;)LUnH`4vGgFA_#AEJE%Yje@@GTKmG(QxA(Rdr!w9jeEzLgBZC2D zRLv~=VZiT55c`EHK#KzFF~w@*8i!OWEr)vDJdF+R2V)w|J>5=E1*;(xCs+V;yQ%R) z0u;6ftQ+9>VL$?j2IKcAOiiamFgtQ4s08)oM=n$!er*2Oe32&iMNzT+PqlO7c7#EQ zLb@v4*%eqf|I?GbMf-nx+N$h-DfIBr_yI1Mj08eDMbai-qSefjOb|5IX44T0gdZA@ zkF|#fM_VPz5bAm^ljf|0^QaA*PT*eK8HoEK<@It)kaWXFBD`G-Nqbl zMXY(|x#$4gzgo}LYOZ9uQmC=gY@wh`4WR!2Wuv|m0}LdlKkCb^$hD~PL+x*NrkE&8 zn9?8s;`^z1j3PHi#7r%Xc9+LBo#YM!K8}Q!d541!(*Q zHR2Mp9BWIxX&ySp_+*&dHaRdxt?08eWUb(h=h%<)>Kiy1pr`s!|G;nJ^7ZZ1w}bk{ z*N6o5)qS0*hKwzqt;3?xoX^m+oSqv~-xICV|HcASHWX2SyUqvK=>O))X=_pcx0|Qk zPNo0Lpq$>c4woByTNd?>v#^je;Y|B)lnq^v3*^%E_@r^)s*Nf0`|y$bS2jg$f{OS= z5$(S%FO`JccVb@g^LTmg;US$JE?E~B9v^FZHqkdOVC)MU&(SPEzBk^ty#b5MY>m14 z$xR_c?q6BY@q+mw*Dkc?;6P{`Nsr3du}rnhzmAewhyVE^FBwZmPqMdH0_*VK&ijAu zR=ZoR|Cd5}bT2|CMfJILRBk-N=Bx6{_>RX&iqP1<`Dhovg-M|2X_U<;qiNCgmfPyO z&HBFzw7v`49RE5+%k3Tn|D7fL_nH;{%b@+@KOQ5i@oyG{D)_$~+7|!4vhd%k@LvWU z0{^|8@!zZPUovfue=ODiuk3$0v|s$=I{zOl|Nmvt=J+3uu|)izRP+B*XutT6$H;2@ z564*H|0U7p_#by|Mrvk|FOdVfoVtlZ{+~2$A33(|2wVf{l8M^fcW3g0jM;na?`+^7G6bx<+{@bl) z{{7!(t6Ta1rBELK;*NMOiPVS-`rjt_hdcgJ7U_a(9^i^kfQUb#tR|uW;}7XcNdF{w z6sBM1JBx}Y4h@w=?3yQuYU$FdJ~9LwafR>?!%s`_wVJAIRwlw>jGxT9|_ymY-(icS~zS>Hz8%cQH< z*5TjBFyONZvTryJU=98|r`>iQ|0gHa{$DAS#k=-D=6>6|wC7j2ZJ7vK+rS>;5V_Xf z*eFETz5{+G6^!|0TBj*kV7W0J@XYgg#MFl+p*e8^ViP3w=S&gGP-L93 zLV;VdfwSTDg3MQj$<)$+ct}INnapk`JSGp$NOt3gVs5NsUZOg-Z0beS-}c0gG|cE4Q0&Bgg&t}j3RdV6zz z_Tl#O>g-P!nWEyzmER!0Y^d=?0d7*2+fQeIDy+^Eg;>!qbN}VTFF*g~mtPOj#yFt) zy7n#9VAG~0yjL{q{PO1Z?ES^{r<>cWi%-{==Qp<>f4Tm&%=z`Yaq{{p-ZvM2z0iI0 zWQ}9CN#yA@)xG#|_VfFTcbjlb!YyXPSg2a7S=ACU`^%p4HITR9UO5i_IZ*t zI(u!ofATe*r+6}8Gyr~3bGyuo$*Kb`#fPwh^pivL&+*g{S}2nL3~_J?%2&1$AY=u2Xj+Ko`>k8e++jx z-~t_U+iccQ&QiUxIIH{i$ynve?CQ!0)SyzyT=0W-nAgs5&2X|5&ui;D%~@i1H$GHm z^`thJ&dxvTt7o*!S#wFU?zG1z6QTk1xgHmg*+GQ*;&`*$jHX%o(h2qd4}Y(dNb!kI zaI-LeKk+fLzt`iVa314LAmbm3q1mT#Sp9gdz5T6L1GppJm=6Z;>4d62v?>$%??&tF zzuDmZ#&ZDI?f;zS-~Vczwoa?}ze=G!ZRTg!Oi38Ji^sG)eFSMy4&yK|J#EMyV_LZU zY+g@FULVM9blaB}a;qE3&Ghw#eZ1Q6Gi5$y!xtr#ySPsJ`WgqiB8haKXkHCqxvy6X zUPgESKu;Oj+kA`GY9Z^ApS8{WPgfN;=5o>OaQUqP zcd^8~hz5$XKGceW5-XBk_CpheUo+(BbD6>vu!D;C~z2|7th?zt^k$|5E5s_+R?+rYsFm+5W9) zd;D)3{dW`m=l%cAN%j3-IaGrE@0EuBYVN-^?SlX9qW|t<|4*7#{NHk@6#HMM2B_@+ zRR}cNPD?9NIJfm%olLX#=1*^6+y@_vO>h_}^j?U@iVn^85cM z-F6lKs}wpo{!7~cSQUHtxh4FvX-E8T^#Z_7_P@e^DRdzGm;M4kapd9WmhQ`^o$-HY z`(N$r&zgw+#75}Rg+9&=q(diD1bzM@+ z{ceQ(f@ur+s(_$?yNS+SU1A397H@_GHU|2jNF z6oy>LZfJe-S{!idjPh}oRRLR47-rHzo z{EWJdZ?!|t^n|kAS;S7x?hLNYi80Ih1z|%3_nd^}js{dwlNatyb%#94)>QN z)z8$3O8d|?!)|T!GC!UhYA=$C_5bz7*}JO?ce0=FXx90EC+*z+Z|kJjt>%BF&=FkQ z5di0xH;`&hIM*1f)jnx-X52Thp~@wQh%p1!%bWT943a?gU{2Bk&Vaz&drHr7Aub-;L_>>8~L;L<;$1a2!lzgO$vuI zxD9Y@yin_`83z#@mh((afJwvixqGEND#kwvLq{O-C%6wCum=Apt^D_&t?p^3!hb2W z0{>D&KQXl_=ojE^;LiuvfXBd&w26n$n$??gWct>C3%Jx*3>DnO4BpOlhWzc#NU2cv z8;$97>UuOO#N}c*KYq9|S0jzLZmss8T)@OS2Lmo9MjvQ>GvZTF93qLPVgn>95_k*( z2PpIt9trsDb1zeFi~-ln?ru>X_V%;NcfjkKKR7*kY zHO`PJ*{{_c_?*=>^RkCjjiNhKbW&4XXGt)fAeU$piOv~}lORC+4vw`k) ztN#a-Q8_xcLnPaRMEUE&mh}Hh_3yxqVe7z|DFCR>uieErUox)um$#OKj|0k3!gPd8 z_q-BxIE)8+YM-*B_l`*PlbbfT56My`oF&!M9dB%j55zQ9Cr|2QT7$|~H$B8m*EnXh zqSA5FeBG^g%m#EA+1SelPx@}sies3Ls5jDV_3gRQyHBPRF&wnfC2VE_W77fk;*M1u zZv*m>7+k%sN8@Wv;=u@IFnCU)` zbT=p-kMDVZX_3x7l=+ki&X$|KLdSR48QJZQml_dDWLBtOauxpisJs*Qwl{M7O_|Iq!~yVL&}w$pDqqa5k+ZDHzOv zHV&NhM(9TY9-AQ~^=!(XTVs)xg}Pg_5xp;sf`BPuO3TmMk0h7k2G|(Td(=}z!zEX6 z0wZ~B7%{XX0-1~iT0wrEH|~lvs<@f=>MACp*h0fkQVtG@bH}=VK~_{kDAKhstpJ#B zdjIn^dZ^nY&8=%5Dcr`wtSo=1.16.0-0' - catalog.cattle.io/namespace: cis-operator-system - catalog.cattle.io/os: linux - catalog.cattle.io/permits-os: linux,windows - catalog.cattle.io/provides-gvr: cis.cattle.io.clusterscans/v1 - catalog.cattle.io/rancher-version: '>= 2.6.0-0' - catalog.cattle.io/release-name: rancher-cis-benchmark - catalog.cattle.io/type: cluster-tool - catalog.cattle.io/ui-component: rancher-cis-benchmark -apiVersion: v1 -appVersion: v2.0.3-rc2 -description: The cis-operator enables running CIS benchmark security scans on a kubernetes - cluster -icon: https://charts.rancher.io/assets/logos/cis-kube-bench.svg -keywords: -- security -name: rancher-cis-benchmark -version: 2.0.3-rc2 diff --git a/charts/rancher-cis-benchmark/2.0.3-rc2/README.md b/charts/rancher-cis-benchmark/2.0.3-rc2/README.md deleted file mode 100644 index 50beab58b..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc2/README.md +++ /dev/null @@ -1,9 +0,0 @@ -# Rancher CIS Benchmark Chart - -The cis-operator enables running CIS benchmark security scans on a kubernetes cluster and generate compliance reports that can be downloaded. - -# Installation - -``` -helm install rancher-cis-benchmark ./ --create-namespace -n cis-operator-system -``` diff --git a/charts/rancher-cis-benchmark/2.0.3-rc2/app-readme.md b/charts/rancher-cis-benchmark/2.0.3-rc2/app-readme.md deleted file mode 100644 index 5e495d605..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc2/app-readme.md +++ /dev/null @@ -1,15 +0,0 @@ -# Rancher CIS Benchmarks - -This chart enables security scanning of the cluster using [CIS (Center for Internet Security) benchmarks](https://www.cisecurity.org/benchmark/kubernetes/). - -For more information on how to use the feature, refer to our [docs](https://rancher.com/docs/rancher/v2.x/en/cis-scans/v2.5/). - -This chart installs the following components: - -- [cis-operator](https://github.com/rancher/cis-operator) - The cis-operator handles launching the [kube-bench](https://github.com/aquasecurity/kube-bench) tool that runs a suite of CIS tests on the nodes of your Kubernetes cluster. After scans finish, the cis-operator generates a compliance report that can be downloaded. -- Scans - A scan is a CRD (`ClusterScan`) that defines when to trigger CIS scans on the cluster based on the defined profile. A report is created after the scan is completed. -- Profiles - A profile is a CRD (`ClusterScanProfile`) that defines the configuration for the CIS scan, which is the benchmark versions to use and any specific tests to skip in that benchmark. This chart installs a few default `ClusterScanProfile` custom resources with no skipped tests, which can immediately be used to launch CIS scans. -- Benchmark Versions - A benchmark version is a CRD (`ClusterScanBenchmark`) that defines the CIS benchmark version to run using kube-bench as well as the valid configuration parameters for that benchmark. This chart installs a few default `ClusterScanBenchmark` custom resources. -- Alerting Resources - Rancher's CIS Benchmark application lets you run a cluster scan on a schedule, and send alerts when scans finish. - - If you want to enable alerts to be delivered when a cluster scan completes, you need to ensure that [Rancher's Monitoring and Alerting](https://rancher.com/docs/rancher/v2.x/en/monitoring-alerting/v2.5/) application is pre-installed and the [Receivers and Routes](https://rancher.com/docs/rancher/v2.x/en/monitoring-alerting/v2.5/configuration/#alertmanager-config) are configured to send out alerts. - - Additionally, you need to set `alerts: true` in the Values YAML while installing or upgrading this chart. diff --git a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/_helpers.tpl b/charts/rancher-cis-benchmark/2.0.3-rc2/templates/_helpers.tpl deleted file mode 100644 index b7bb00042..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/_helpers.tpl +++ /dev/null @@ -1,27 +0,0 @@ -{{/* Ensure namespace is set the same everywhere */}} -{{- define "cis.namespace" -}} - {{- .Release.Namespace | default "cis-operator-system" -}} -{{- end -}} - -{{- define "system_default_registry" -}} -{{- if .Values.global.cattle.systemDefaultRegistry -}} -{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}} -{{- else -}} -{{- "" -}} -{{- end -}} -{{- end -}} - -{{/* -Windows cluster will add default taint for linux nodes, -add below linux tolerations to workloads could be scheduled to those linux nodes -*/}} -{{- define "linux-node-tolerations" -}} -- key: "cattle.io/os" - value: "linux" - effect: "NoSchedule" - operator: "Equal" -{{- end -}} - -{{- define "linux-node-selector" -}} -kubernetes.io/os: linux -{{- end -}} diff --git a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/alertingrule.yaml b/charts/rancher-cis-benchmark/2.0.3-rc2/templates/alertingrule.yaml deleted file mode 100644 index 1787c88a0..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/alertingrule.yaml +++ /dev/null @@ -1,14 +0,0 @@ -{{- if .Values.alerts.enabled -}} ---- -apiVersion: monitoring.coreos.com/v1 -kind: PodMonitor -metadata: - name: rancher-cis-pod-monitor - namespace: {{ template "cis.namespace" . }} -spec: - selector: - matchLabels: - cis.cattle.io/operator: cis-operator - podMetricsEndpoints: - - port: cismetrics -{{- end }} diff --git a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/benchmark-aks-1.0.yaml b/charts/rancher-cis-benchmark/2.0.3-rc2/templates/benchmark-aks-1.0.yaml deleted file mode 100644 index 1ac866253..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/benchmark-aks-1.0.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: aks-1.0 -spec: - clusterProvider: aks - minKubernetesVersion: "1.15.0" diff --git a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/benchmark-cis-1.5.yaml b/charts/rancher-cis-benchmark/2.0.3-rc2/templates/benchmark-cis-1.5.yaml deleted file mode 100644 index 39e8b834a..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/benchmark-cis-1.5.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: cis-1.5 -spec: - clusterProvider: "" - minKubernetesVersion: "1.15.0" diff --git a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/benchmark-cis-1.6.yaml b/charts/rancher-cis-benchmark/2.0.3-rc2/templates/benchmark-cis-1.6.yaml deleted file mode 100644 index 93ba064f4..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/benchmark-cis-1.6.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: cis-1.6 -spec: - clusterProvider: "" - minKubernetesVersion: "1.16.0" diff --git a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/benchmark-eks-1.0.yaml b/charts/rancher-cis-benchmark/2.0.3-rc2/templates/benchmark-eks-1.0.yaml deleted file mode 100644 index bd2e32cd3..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/benchmark-eks-1.0.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: eks-1.0 -spec: - clusterProvider: eks - minKubernetesVersion: "1.15.0" diff --git a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/benchmark-gke-1.0.yaml b/charts/rancher-cis-benchmark/2.0.3-rc2/templates/benchmark-gke-1.0.yaml deleted file mode 100644 index 72122e8c5..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/benchmark-gke-1.0.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: gke-1.0 -spec: - clusterProvider: gke - minKubernetesVersion: "1.15.0" diff --git a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/benchmark-k3s-cis-1.6-hardened.yaml b/charts/rancher-cis-benchmark/2.0.3-rc2/templates/benchmark-k3s-cis-1.6-hardened.yaml deleted file mode 100644 index 3ca9b6009..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/benchmark-k3s-cis-1.6-hardened.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: k3s-cis-1.6-hardened -spec: - clusterProvider: k3s - minKubernetesVersion: "1.20.5" diff --git a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/benchmark-k3s-cis-1.6-permissive.yaml b/charts/rancher-cis-benchmark/2.0.3-rc2/templates/benchmark-k3s-cis-1.6-permissive.yaml deleted file mode 100644 index 6d4253c6e..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/benchmark-k3s-cis-1.6-permissive.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: k3s-cis-1.6-permissive -spec: - clusterProvider: k3s - minKubernetesVersion: "1.20.5" diff --git a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/benchmark-rke-cis-1.5-hardened.yaml b/charts/rancher-cis-benchmark/2.0.3-rc2/templates/benchmark-rke-cis-1.5-hardened.yaml deleted file mode 100644 index b5627f966..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/benchmark-rke-cis-1.5-hardened.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke-cis-1.5-hardened -spec: - clusterProvider: rke - minKubernetesVersion: "1.15.0" diff --git a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/benchmark-rke-cis-1.5-permissive.yaml b/charts/rancher-cis-benchmark/2.0.3-rc2/templates/benchmark-rke-cis-1.5-permissive.yaml deleted file mode 100644 index 95f80c0f0..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/benchmark-rke-cis-1.5-permissive.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke-cis-1.5-permissive -spec: - clusterProvider: rke - minKubernetesVersion: "1.15.0" diff --git a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/benchmark-rke-cis-1.6-hardened.yaml b/charts/rancher-cis-benchmark/2.0.3-rc2/templates/benchmark-rke-cis-1.6-hardened.yaml deleted file mode 100644 index d75de8154..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/benchmark-rke-cis-1.6-hardened.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke-cis-1.6-hardened -spec: - clusterProvider: rke - minKubernetesVersion: "1.16.0" diff --git a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/benchmark-rke-cis-1.6-permissive.yaml b/charts/rancher-cis-benchmark/2.0.3-rc2/templates/benchmark-rke-cis-1.6-permissive.yaml deleted file mode 100644 index 52428f4a7..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/benchmark-rke-cis-1.6-permissive.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke-cis-1.6-permissive -spec: - clusterProvider: rke - minKubernetesVersion: "1.16.0" diff --git a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/benchmark-rke2-cis-1.5-hardened.yaml b/charts/rancher-cis-benchmark/2.0.3-rc2/templates/benchmark-rke2-cis-1.5-hardened.yaml deleted file mode 100644 index 3d83e9bd8..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/benchmark-rke2-cis-1.5-hardened.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke2-cis-1.5-hardened -spec: - clusterProvider: rke2 - minKubernetesVersion: "1.18.0" diff --git a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/benchmark-rke2-cis-1.5-permissive.yaml b/charts/rancher-cis-benchmark/2.0.3-rc2/templates/benchmark-rke2-cis-1.5-permissive.yaml deleted file mode 100644 index f66aa8f6e..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/benchmark-rke2-cis-1.5-permissive.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke2-cis-1.5-permissive -spec: - clusterProvider: rke2 - minKubernetesVersion: "1.18.0" diff --git a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/benchmark-rke2-cis-1.6-hardened.yaml b/charts/rancher-cis-benchmark/2.0.3-rc2/templates/benchmark-rke2-cis-1.6-hardened.yaml deleted file mode 100644 index 3593bf371..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/benchmark-rke2-cis-1.6-hardened.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke2-cis-1.6-hardened -spec: - clusterProvider: rke2 - minKubernetesVersion: "1.20.5" diff --git a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/benchmark-rke2-cis-1.6-permissive.yaml b/charts/rancher-cis-benchmark/2.0.3-rc2/templates/benchmark-rke2-cis-1.6-permissive.yaml deleted file mode 100644 index 522f846ae..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/benchmark-rke2-cis-1.6-permissive.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke2-cis-1.6-permissive -spec: - clusterProvider: rke2 - minKubernetesVersion: "1.20.5" diff --git a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/cis-roles.yaml b/charts/rancher-cis-benchmark/2.0.3-rc2/templates/cis-roles.yaml deleted file mode 100644 index 23c93dc65..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/cis-roles.yaml +++ /dev/null @@ -1,49 +0,0 @@ ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - name: cis-admin -rules: - - apiGroups: - - cis.cattle.io - resources: - - clusterscanbenchmarks - - clusterscanprofiles - - clusterscans - - clusterscanreports - verbs: ["create", "update", "delete", "patch","get", "watch", "list"] - - apiGroups: - - catalog.cattle.io - resources: ["apps"] - resourceNames: ["rancher-cis-benchmark"] - verbs: ["get", "watch", "list"] - - apiGroups: - - "" - resources: - - configmaps - verbs: - - '*' ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - name: cis-view -rules: - - apiGroups: - - cis.cattle.io - resources: - - clusterscanbenchmarks - - clusterscanprofiles - - clusterscans - - clusterscanreports - verbs: ["get", "watch", "list"] - - apiGroups: - - catalog.cattle.io - resources: ["apps"] - resourceNames: ["rancher-cis-benchmark"] - verbs: ["get", "watch", "list"] - - apiGroups: - - "" - resources: - - configmaps - verbs: ["get", "watch", "list"] diff --git a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/configmap.yaml b/charts/rancher-cis-benchmark/2.0.3-rc2/templates/configmap.yaml deleted file mode 100644 index 3de10e55e..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/configmap.yaml +++ /dev/null @@ -1,18 +0,0 @@ -kind: ConfigMap -apiVersion: v1 -metadata: - name: default-clusterscanprofiles - namespace: {{ template "cis.namespace" . }} -data: - # Default ClusterScanProfiles per cluster provider type - rke: |- - <1.16.0: rke-profile-permissive-1.5 - >=1.16.0: rke-profile-permissive-1.6 - rke2: |- - <1.20.5: rke2-cis-1.5-profile-permissive - >=1.20.5: rke2-cis-1.6-profile-permissive - eks: "eks-profile" - gke: "gke-profile" - aks: "aks-profile" - k3s: "k3s-cis-1.6-profile-permissive" - default: "cis-1.6-profile" diff --git a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/deployment.yaml b/charts/rancher-cis-benchmark/2.0.3-rc2/templates/deployment.yaml deleted file mode 100644 index e14c3ae83..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/deployment.yaml +++ /dev/null @@ -1,55 +0,0 @@ -apiVersion: apps/v1 -kind: Deployment -metadata: - name: cis-operator - namespace: {{ template "cis.namespace" . }} - labels: - cis.cattle.io/operator: cis-operator -spec: - selector: - matchLabels: - cis.cattle.io/operator: cis-operator - template: - metadata: - labels: - cis.cattle.io/operator: cis-operator - spec: - serviceAccountName: cis-operator-serviceaccount - containers: - - name: cis-operator - image: '{{ template "system_default_registry" . }}{{ .Values.image.cisoperator.repository }}:{{ .Values.image.cisoperator.tag }}' - imagePullPolicy: Always - ports: - - name: cismetrics - containerPort: {{ .Values.alerts.metricsPort }} - env: - - name: SECURITY_SCAN_IMAGE - value: {{ template "system_default_registry" . }}{{ .Values.image.securityScan.repository }} - - name: SECURITY_SCAN_IMAGE_TAG - value: {{ .Values.image.securityScan.tag }} - - name: SONOBUOY_IMAGE - value: {{ template "system_default_registry" . }}{{ .Values.image.sonobuoy.repository }} - - name: SONOBUOY_IMAGE_TAG - value: {{ .Values.image.sonobuoy.tag }} - - name: CIS_ALERTS_METRICS_PORT - value: '{{ .Values.alerts.metricsPort }}' - - name: CIS_ALERTS_SEVERITY - value: {{ .Values.alerts.severity }} - - name: CIS_ALERTS_ENABLED - value: {{ .Values.alerts.enabled | default "false" | quote }} - - name: CLUSTER_NAME - value: {{ .Values.global.cattle.clusterName }} - resources: - {{- toYaml .Values.resources | nindent 12 }} - nodeSelector: {{ include "linux-node-selector" . | nindent 8 }} -{{- if .Values.nodeSelector }} -{{ toYaml .Values.nodeSelector | indent 8 }} -{{- end }} - tolerations: {{ include "linux-node-tolerations" . | nindent 8 }} -{{- if .Values.tolerations }} -{{ toYaml .Values.tolerations | indent 8 }} -{{- end }} - {{- with .Values.affinity }} - affinity: - {{- toYaml . | nindent 8 }} - {{- end }} diff --git a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/network_policy_allow_all.yaml b/charts/rancher-cis-benchmark/2.0.3-rc2/templates/network_policy_allow_all.yaml deleted file mode 100644 index 6ed5d645e..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/network_policy_allow_all.yaml +++ /dev/null @@ -1,15 +0,0 @@ ---- -apiVersion: networking.k8s.io/v1 -kind: NetworkPolicy -metadata: - name: default-allow-all - namespace: {{ template "cis.namespace" . }} -spec: - podSelector: {} - ingress: - - {} - egress: - - {} - policyTypes: - - Ingress - - Egress diff --git a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/patch_default_serviceaccount.yaml b/charts/rancher-cis-benchmark/2.0.3-rc2/templates/patch_default_serviceaccount.yaml deleted file mode 100644 index e78a6bd08..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/patch_default_serviceaccount.yaml +++ /dev/null @@ -1,29 +0,0 @@ ---- -apiVersion: batch/v1 -kind: Job -metadata: - name: patch-sa - annotations: - "helm.sh/hook": post-install, post-upgrade - "helm.sh/hook-delete-policy": hook-succeeded, before-hook-creation -spec: - template: - spec: - serviceAccountName: cis-operator-serviceaccount - nodeSelector: {{ include "linux-node-selector" . | nindent 8 }} -{{- if .Values.nodeSelector }} -{{ toYaml .Values.nodeSelector | indent 8 }} -{{- end }} - tolerations: {{ include "linux-node-tolerations" . | nindent 8 }} -{{- if .Values.tolerations }} -{{ toYaml .Values.tolerations | indent 8 }} -{{- end }} - restartPolicy: Never - containers: - - name: sa - image: "{{ template "system_default_registry" . }}{{ .Values.global.kubectl.repository }}:{{ .Values.global.kubectl.tag }}" - imagePullPolicy: {{ .Values.global.imagePullPolicy }} - command: ["kubectl", "patch", "serviceaccount", "default", "-p", "{\"automountServiceAccountToken\": false}"] - args: ["-n", {{ template "cis.namespace" . }}] - - backoffLimit: 1 diff --git a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/rbac.yaml b/charts/rancher-cis-benchmark/2.0.3-rc2/templates/rbac.yaml deleted file mode 100644 index 4ff88ea5f..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/rbac.yaml +++ /dev/null @@ -1,43 +0,0 @@ -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - labels: - app.kubernetes.io/name: rancher-cis-benchmark - app.kubernetes.io/instance: release-name - name: cis-operator-role -rules: -- apiGroups: - - '*' - resources: - - '*' - verbs: - - '*' ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - labels: - app.kubernetes.io/name: rancher-cis-benchmark - app.kubernetes.io/instance: release-name - name: cis-operator-rolebinding -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: cis-operator-role -subjects: -- kind: ServiceAccount - name: cis-serviceaccount - namespace: {{ template "cis.namespace" . }} ---- -kind: ClusterRoleBinding -apiVersion: rbac.authorization.k8s.io/v1 -metadata: - name: cis-operator-installer -subjects: -- kind: ServiceAccount - name: cis-operator-serviceaccount - namespace: {{ template "cis.namespace" . }} -roleRef: - kind: ClusterRole - name: cluster-admin - apiGroup: rbac.authorization.k8s.io \ No newline at end of file diff --git a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/scanprofile-cis-1.5.yml b/charts/rancher-cis-benchmark/2.0.3-rc2/templates/scanprofile-cis-1.5.yml deleted file mode 100644 index d69ae9dd5..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/scanprofile-cis-1.5.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: cis-1.5-profile - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: cis-1.5 diff --git a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/scanprofile-cis-1.6.yaml b/charts/rancher-cis-benchmark/2.0.3-rc2/templates/scanprofile-cis-1.6.yaml deleted file mode 100644 index 8a8d8bf88..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/scanprofile-cis-1.6.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: cis-1.6-profile - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: cis-1.6 diff --git a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/scanprofile-k3s-cis-1.6-hardened.yml b/charts/rancher-cis-benchmark/2.0.3-rc2/templates/scanprofile-k3s-cis-1.6-hardened.yml deleted file mode 100644 index 095e977ab..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/scanprofile-k3s-cis-1.6-hardened.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: k3s-cis-1.6-profile-hardened - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: k3s-cis-1.6-hardened diff --git a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/scanprofile-k3s-cis-1.6-permissive.yml b/charts/rancher-cis-benchmark/2.0.3-rc2/templates/scanprofile-k3s-cis-1.6-permissive.yml deleted file mode 100644 index 3b22a80c8..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/scanprofile-k3s-cis-1.6-permissive.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: k3s-cis-1.6-profile-permissive - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: k3s-cis-1.6-permissive diff --git a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/scanprofile-rke-1.5-hardened.yml b/charts/rancher-cis-benchmark/2.0.3-rc2/templates/scanprofile-rke-1.5-hardened.yml deleted file mode 100644 index 4eabe158a..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/scanprofile-rke-1.5-hardened.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: rke-profile-hardened-1.5 - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: rke-cis-1.5-hardened \ No newline at end of file diff --git a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/scanprofile-rke-1.5-permissive.yml b/charts/rancher-cis-benchmark/2.0.3-rc2/templates/scanprofile-rke-1.5-permissive.yml deleted file mode 100644 index 1f78751d1..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/scanprofile-rke-1.5-permissive.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: rke-profile-permissive-1.5 - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: rke-cis-1.5-permissive diff --git a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/scanprofile-rke-1.6-hardened.yaml b/charts/rancher-cis-benchmark/2.0.3-rc2/templates/scanprofile-rke-1.6-hardened.yaml deleted file mode 100644 index d38febd80..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/scanprofile-rke-1.6-hardened.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: rke-profile-hardened-1.6 - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: rke-cis-1.6-hardened diff --git a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/scanprofile-rke-1.6-permissive.yaml b/charts/rancher-cis-benchmark/2.0.3-rc2/templates/scanprofile-rke-1.6-permissive.yaml deleted file mode 100644 index d31b5b0d2..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/scanprofile-rke-1.6-permissive.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: rke-profile-permissive-1.6 - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: rke-cis-1.6-permissive diff --git a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/scanprofile-rke2-cis-1.5-hardened.yml b/charts/rancher-cis-benchmark/2.0.3-rc2/templates/scanprofile-rke2-cis-1.5-hardened.yml deleted file mode 100644 index 83eb3131e..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/scanprofile-rke2-cis-1.5-hardened.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: rke2-cis-1.5-profile-hardened - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: rke2-cis-1.5-hardened diff --git a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/scanprofile-rke2-cis-1.5-permissive.yml b/charts/rancher-cis-benchmark/2.0.3-rc2/templates/scanprofile-rke2-cis-1.5-permissive.yml deleted file mode 100644 index 40dc44bdf..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/scanprofile-rke2-cis-1.5-permissive.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: rke2-cis-1.5-profile-permissive - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: rke2-cis-1.5-permissive diff --git a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/scanprofile-rke2-cis-1.6-hardened.yml b/charts/rancher-cis-benchmark/2.0.3-rc2/templates/scanprofile-rke2-cis-1.6-hardened.yml deleted file mode 100644 index c7ac7f949..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/scanprofile-rke2-cis-1.6-hardened.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: rke2-cis-1.6-profile-hardened - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: rke2-cis-1.6-hardened diff --git a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/scanprofile-rke2-cis-1.6-permissive.yml b/charts/rancher-cis-benchmark/2.0.3-rc2/templates/scanprofile-rke2-cis-1.6-permissive.yml deleted file mode 100644 index 96ca1345a..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/scanprofile-rke2-cis-1.6-permissive.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: rke2-cis-1.6-profile-permissive - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: rke2-cis-1.6-permissive diff --git a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/scanprofileaks.yml b/charts/rancher-cis-benchmark/2.0.3-rc2/templates/scanprofileaks.yml deleted file mode 100644 index ea7b25b40..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/scanprofileaks.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: aks-profile - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: aks-1.0 \ No newline at end of file diff --git a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/scanprofileeks.yml b/charts/rancher-cis-benchmark/2.0.3-rc2/templates/scanprofileeks.yml deleted file mode 100644 index 49c7e0246..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/scanprofileeks.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: eks-profile - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: eks-1.0 \ No newline at end of file diff --git a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/scanprofilegke.yml b/charts/rancher-cis-benchmark/2.0.3-rc2/templates/scanprofilegke.yml deleted file mode 100644 index 2ddd0686f..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/scanprofilegke.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: gke-profile - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: gke-1.0 \ No newline at end of file diff --git a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/serviceaccount.yaml b/charts/rancher-cis-benchmark/2.0.3-rc2/templates/serviceaccount.yaml deleted file mode 100644 index ec48ec622..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/serviceaccount.yaml +++ /dev/null @@ -1,14 +0,0 @@ -apiVersion: v1 -kind: ServiceAccount -metadata: - namespace: {{ template "cis.namespace" . }} - name: cis-operator-serviceaccount ---- -apiVersion: v1 -kind: ServiceAccount -metadata: - namespace: {{ template "cis.namespace" . }} - labels: - app.kubernetes.io/name: rancher-cis-benchmark - app.kubernetes.io/instance: release-name - name: cis-serviceaccount diff --git a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/validate-install-crd.yaml b/charts/rancher-cis-benchmark/2.0.3-rc2/templates/validate-install-crd.yaml deleted file mode 100644 index 562295791..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc2/templates/validate-install-crd.yaml +++ /dev/null @@ -1,17 +0,0 @@ -#{{- if gt (len (lookup "rbac.authorization.k8s.io/v1" "ClusterRole" "" "")) 0 -}} -# {{- $found := dict -}} -# {{- set $found "cis.cattle.io/v1/ClusterScan" false -}} -# {{- set $found "cis.cattle.io/v1/ClusterScanBenchmark" false -}} -# {{- set $found "cis.cattle.io/v1/ClusterScanProfile" false -}} -# {{- set $found "cis.cattle.io/v1/ClusterScanReport" false -}} -# {{- range .Capabilities.APIVersions -}} -# {{- if hasKey $found (toString .) -}} -# {{- set $found (toString .) true -}} -# {{- end -}} -# {{- end -}} -# {{- range $_, $exists := $found -}} -# {{- if (eq $exists false) -}} -# {{- required "Required CRDs are missing. Please install the corresponding CRD chart before installing this chart." "" -}} -# {{- end -}} -# {{- end -}} -#{{- end -}} \ No newline at end of file diff --git a/charts/rancher-cis-benchmark/2.0.3-rc2/values.yaml b/charts/rancher-cis-benchmark/2.0.3-rc2/values.yaml deleted file mode 100644 index 0d5eb7cc5..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc2/values.yaml +++ /dev/null @@ -1,49 +0,0 @@ -# Default values for rancher-cis-benchmark. -# This is a YAML-formatted file. -# Declare variables to be passed into your templates. - -image: - cisoperator: - repository: rancher/cis-operator - tag: v1.0.7-rc1 - securityScan: - repository: rancher/security-scan - tag: v0.2.6-rc2 - sonobuoy: - repository: rancher/mirrored-sonobuoy-sonobuoy - tag: v0.53.2 - -resources: {} - # We usually recommend not to specify default resources and to leave this as a conscious - # choice for the user. This also increases chances charts run on environments with little - # resources, such as Minikube. If you do want to specify resources, uncomment the following - # lines, adjust them as necessary, and remove the curly braces after 'resources:'. - # limits: - # cpu: 100m - # memory: 128Mi - # requests: - # cpu: 100m - # memory: 128Mi - -## Node labels for pod assignment -## Ref: https://kubernetes.io/docs/user-guide/node-selection/ -## -nodeSelector: {} - -## List of node taints to tolerate (requires Kubernetes >= 1.6) -tolerations: [] - -affinity: {} - -global: - cattle: - systemDefaultRegistry: "" - clusterName: "" - kubectl: - repository: rancher/kubectl - tag: v1.20.2 - -alerts: - enabled: false - severity: warning - metricsPort: 8080 diff --git a/index.yaml b/index.yaml index 49db9e400..8669afbcb 100755 --- a/index.yaml +++ b/index.yaml @@ -2220,32 +2220,6 @@ entries: - assets/rancher-backup-crd/rancher-backup-crd-1.0.200.tgz version: 1.0.200 rancher-cis-benchmark: - - annotations: - catalog.cattle.io/auto-install: rancher-cis-benchmark-crd=match - catalog.cattle.io/certified: rancher - catalog.cattle.io/display-name: CIS Benchmark - catalog.cattle.io/kube-version: '>=1.16.0-0' - catalog.cattle.io/namespace: cis-operator-system - catalog.cattle.io/os: linux - catalog.cattle.io/permits-os: linux,windows - catalog.cattle.io/provides-gvr: cis.cattle.io.clusterscans/v1 - catalog.cattle.io/rancher-version: '>= 2.6.0-0' - catalog.cattle.io/release-name: rancher-cis-benchmark - catalog.cattle.io/type: cluster-tool - catalog.cattle.io/ui-component: rancher-cis-benchmark - apiVersion: v1 - appVersion: v2.0.3-rc2 - created: "2022-03-18T14:10:27.557472-07:00" - description: The cis-operator enables running CIS benchmark security scans on - a kubernetes cluster - digest: 4d1090fefab449a43c8ba67b14346a821d341d473cb449cbde24d82fb985e087 - icon: https://charts.rancher.io/assets/logos/cis-kube-bench.svg - keywords: - - security - name: rancher-cis-benchmark - urls: - - assets/rancher-cis-benchmark/rancher-cis-benchmark-2.0.3-rc2.tgz - version: 2.0.3-rc2 - annotations: catalog.cattle.io/auto-install: rancher-cis-benchmark-crd=match catalog.cattle.io/certified: rancher @@ -2457,20 +2431,6 @@ entries: - assets/rancher-cis-benchmark/rancher-cis-benchmark-1.0.100.tgz version: 1.0.100 rancher-cis-benchmark-crd: - - annotations: - catalog.cattle.io/certified: rancher - catalog.cattle.io/hidden: "true" - catalog.cattle.io/namespace: cis-operator-system - catalog.cattle.io/release-name: rancher-cis-benchmark-crd - apiVersion: v1 - created: "2022-03-03T23:58:32.776661352+05:30" - description: Installs the CRDs for rancher-cis-benchmark. - digest: 4164a258cff7c5053da18d36622198facf9db09bb54da81e4d923ce6f4056951 - name: rancher-cis-benchmark-crd - type: application - urls: - - assets/rancher-cis-benchmark-crd/rancher-cis-benchmark-crd-2.0.3-rc2.tgz - version: 2.0.3-rc2 - annotations: catalog.cattle.io/certified: rancher catalog.cattle.io/hidden: "true"