From 3fb5a784beecc2e0323aed0e9056b7e52d94c97f Mon Sep 17 00:00:00 2001 From: MonzElmasry Date: Fri, 9 Apr 2021 01:34:00 +0200 Subject: [PATCH 1/2] delete rancher-cis-benchmark 1.0.402 and clean index.yaml --- .../rancher-cis-benchmark-1.0.402-rc00.tgz | Bin 4949 -> 0 bytes ...rancher-cis-benchmark-crd-1.0.402-rc00.tgz | Bin 1452 -> 0 bytes .../1.0.402-rc00/Chart.yaml | 10 -- .../1.0.402-rc00/README.md | 2 - .../1.0.402-rc00/templates/clusterscan.yaml | 149 ------------------ .../templates/clusterscanbenchmark.yaml | 55 ------- .../templates/clusterscanprofile.yaml | 37 ----- .../templates/clusterscanreport.yaml | 40 ----- .../1.0.402-rc00/Chart.yaml | 18 --- .../1.0.402-rc00/README.md | 9 -- .../1.0.402-rc00/app-readme.md | 15 -- .../1.0.402-rc00/templates/_helpers.tpl | 23 --- .../1.0.402-rc00/templates/alertingrule.yaml | 14 -- .../templates/benchmark-cis-1.5.yaml | 8 - .../templates/benchmark-cis-1.6.yaml | 8 - .../templates/benchmark-eks-1.0.yaml | 8 - .../templates/benchmark-gke-1.0.yaml | 8 - .../benchmark-rke-cis-1.5-hardened.yaml | 8 - .../benchmark-rke-cis-1.5-permissive.yaml | 8 - .../benchmark-rke-cis-1.6-hardened.yaml | 8 - .../benchmark-rke-cis-1.6-permissive.yaml | 8 - .../benchmark-rke2-cis-1.5-hardened.yaml | 8 - .../benchmark-rke2-cis-1.5-permissive.yaml | 8 - .../benchmark-rke2-cis-1.6-hardened.yaml | 8 - .../benchmark-rke2-cis-1.6-permissive.yaml | 8 - .../1.0.402-rc00/templates/cis-roles.yaml | 49 ------ .../1.0.402-rc00/templates/configmap.yaml | 16 -- .../1.0.402-rc00/templates/deployment.yaml | 57 ------- .../templates/network_policy_allow_all.yaml | 15 -- .../patch_default_serviceaccount.yaml | 20 --- .../1.0.402-rc00/templates/rbac.yaml | 43 ----- .../templates/scanprofile-cis-1.5.yml | 9 -- .../templates/scanprofile-cis-1.6.yaml | 9 -- .../scanprofile-rke-1.5-hardened.yml | 9 -- .../scanprofile-rke-1.5-permissive.yml | 9 -- .../scanprofile-rke-1.6-hardened.yaml | 9 -- .../scanprofile-rke-1.6-permissive.yaml | 9 -- .../scanprofile-rke2-cis-1.5-hardened.yml | 9 -- .../scanprofile-rke2-cis-1.5-permissive.yml | 9 -- .../scanprofile-rke2-cis-1.6-hardened.yml | 9 -- .../scanprofile-rke2-cis-1.6-permissive.yml | 9 -- .../1.0.402-rc00/templates/scanprofileeks.yml | 9 -- .../1.0.402-rc00/templates/scanprofilegke.yml | 9 -- .../templates/serviceaccount.yaml | 14 -- .../templates/validate-install-crd.yaml | 17 -- .../1.0.402-rc00/values.yaml | 45 ------ index.yaml | 22 --- 47 files changed, 874 deletions(-) delete mode 100755 assets/rancher-cis-benchmark/rancher-cis-benchmark-1.0.402-rc00.tgz delete mode 100755 assets/rancher-cis-benchmark/rancher-cis-benchmark-crd-1.0.402-rc00.tgz delete mode 100755 charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.402-rc00/Chart.yaml delete mode 100755 charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.402-rc00/README.md delete mode 100755 charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.402-rc00/templates/clusterscan.yaml delete mode 100755 charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.402-rc00/templates/clusterscanbenchmark.yaml delete mode 100755 charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.402-rc00/templates/clusterscanprofile.yaml delete mode 100755 charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.402-rc00/templates/clusterscanreport.yaml delete mode 100755 charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/Chart.yaml delete mode 100755 charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/README.md delete mode 100755 charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/app-readme.md delete mode 100755 charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/_helpers.tpl delete mode 100755 charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/alertingrule.yaml delete mode 100755 charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/benchmark-cis-1.5.yaml delete mode 100755 charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/benchmark-cis-1.6.yaml delete mode 100755 charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/benchmark-eks-1.0.yaml delete mode 100755 charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/benchmark-gke-1.0.yaml delete mode 100755 charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/benchmark-rke-cis-1.5-hardened.yaml delete mode 100755 charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/benchmark-rke-cis-1.5-permissive.yaml delete mode 100755 charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/benchmark-rke-cis-1.6-hardened.yaml delete mode 100755 charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/benchmark-rke-cis-1.6-permissive.yaml delete mode 100755 charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/benchmark-rke2-cis-1.5-hardened.yaml delete mode 100755 charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/benchmark-rke2-cis-1.5-permissive.yaml delete mode 100755 charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/benchmark-rke2-cis-1.6-hardened.yaml delete mode 100755 charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/benchmark-rke2-cis-1.6-permissive.yaml delete mode 100755 charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/cis-roles.yaml delete mode 100755 charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/configmap.yaml delete mode 100755 charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/deployment.yaml delete mode 100755 charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/network_policy_allow_all.yaml delete mode 100755 charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/patch_default_serviceaccount.yaml delete mode 100755 charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/rbac.yaml delete mode 100755 charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/scanprofile-cis-1.5.yml delete mode 100755 charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/scanprofile-cis-1.6.yaml delete mode 100755 charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/scanprofile-rke-1.5-hardened.yml delete mode 100755 charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/scanprofile-rke-1.5-permissive.yml delete mode 100755 charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/scanprofile-rke-1.6-hardened.yaml delete mode 100755 charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/scanprofile-rke-1.6-permissive.yaml delete mode 100755 charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/scanprofile-rke2-cis-1.5-hardened.yml delete mode 100755 charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/scanprofile-rke2-cis-1.5-permissive.yml delete mode 100755 charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/scanprofile-rke2-cis-1.6-hardened.yml delete mode 100755 charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/scanprofile-rke2-cis-1.6-permissive.yml delete mode 100755 charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/scanprofileeks.yml delete mode 100755 charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/scanprofilegke.yml delete mode 100755 charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/serviceaccount.yaml delete mode 100755 charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/validate-install-crd.yaml delete mode 100755 charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/values.yaml diff --git a/assets/rancher-cis-benchmark/rancher-cis-benchmark-1.0.402-rc00.tgz b/assets/rancher-cis-benchmark/rancher-cis-benchmark-1.0.402-rc00.tgz deleted file mode 100755 index ed504248a3f816bfca97891e571c3c8d6bc92cd1..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 4949 zcmV-b6RPYViwG0|00000|0w_~VMtOiV@ORlOnEsqVl!4SWK%V1T2nbTPgYhoO;>Dc zVQyr3R8em|NM&qo0PJ0TZ`(MN-+#}aVxT^Uwu?x9iQ^Q;JqKjd+#;=9&o*H!M^S3-m_u85+X$$kUCCyIo8P9>ts?Q>)66nEr}FQqKBt+is9JE`0S`UbhjT^aYKTdG>ycb3y@RWDueRkuXNt z$cQ)R4if!DP&Eb9Ki~`q+#~}O3>8YggQnBneo4(c((o0)xCX1A)WHaO= zE}Oamnv3m*CvQiM8=OwK2xPzE=9M-clGkn4OVi0##}$67)p%;qd_%Nc|KE}@LHSq) zV2%Fow2r%F{eRSJ)%w2*dIqm?NRm*29dj6Ru^fwD;~BgkQwdZ8f!|Ip-nc_9BBB%q zFr*>s46o4-i9om|f?AEEI1CVCtr-HKOmUdOGJg> z0s}Y8ntzyM+3tCVjfOzU6XB!m!`*!Y;2Hb_A(06Q!zl>#c@!ZFfN`beCS&yJa0)>> zLV0N*EYKN3B)14k4+_zP;&Uc_$`ff=`(sXhGy|%}x*8Oo9YGRG4wU&q+baqFm@wb| z70TEMZ32+pQo&h-Oi7qfHHMIClVy14O*sIW_+wrD1!YvLdk@ZsdW<39Fd=NNCxv1O zv%OWOaYG)4d_vjCa1SZdSxE4&M4I$SSHRFmDT$aKnEnflxamEDpNMb@13`>zh6)8d zpNaapmokm0GEUAj0Py3a5A9YfO20=KnPF{rUR}_%i=Psdo0e!W9^e&*=DA&jRqMGDWhs?lSd&RkT7++RETzpS??vqPPuWB>= zEzolNpKIsl^%%n#h4fUsvn#N6{nzf4?Emp`t5@6qD(LR6`8}L5nFxe@MWs!=M5~!4 zi4e3pm`=th5Wa8T-#6~=Ty2#oLvZv$DKF`Od#??f&fs0z1(EkQ=lf@F%bX=^Hd|O1 z)kaW%o~y`ax=uM&Llo2hQ22goMtVWS$xce@$Aa|BaJC*+?WI?z$daqyJmoixe;sH8WoPw1r%p+&vx&TT(MoM{)6vXSR=fn0h%kD9mb#tmgbAKvlc!scj1s7OE* z(JtoVCQr-*H|3S4r@MJ~clqjY!Mb>Gf8WrniN5htQ+L}qw`K$K4H;l4?E{$K!)wme zPiYAm^Wefdw`VMfIc3%>b|E&tu1{s^`{w%U+fi5R@L$;ErP6JCM>{Bib@=ae4omoN zck2D0YN(9vdC26bKDCa@l~34gSAG%S=^V)sn))~I?9RGK*Q^m`Kjpj2dCgASYae+n z=UYM6*FoFjzgHFh+co~Hpnc%Kw=@2GHU2B6&GC;ndTd*J!GE{5|4&4Zi~n?vtj0gy z$l3w;l4x`Mk8ZF+{CB%G{;QzJ#eX_SR^xwkgEjuYB-$MR;s&!l0C!A8fDD7pl)+m3 zcgy>KhrQNujsGg>aq+)wj;vM&qE-e^PP^ehMiEgd>Fq{m0_*W#UjKJHoueB6RnY$M zKbs@92KaJm7yS1su>b9P{a*>~3;(@Gu>bXL;Qnbh{8wQA>-WDZq5a|iG30rpK> z;lH!n2Eg|CKkOaX@BdUnkB<@JB7)2`qDtAtV=ZASTm#N|M9iwZl9 zP~a|Cr`ufP&G^njP!(1g?^2!+qsYS~q!IcAsA-H1(5r_&{OKAc^&j@Q(4Il2Eh;QQ z%(X4&M< z`!;Y!f#GMaj@IEnz&Pa72-#X$t39Zp;)QYo_^(;+Fb&;`=;d>g|Hi+%yBR8M5|s zrU+#y3eMP4fm^bH^WgcM%vXlV(bB)W%R@bw!d@Zdo;M302KV><2eT?Ng8TdD^DTLo zgyB0LQh(ZqlW;<&GEX<|^Gu|LUS**bAg5diHq=<59cgrmLL@Rfp)4W0U992i?DUt* z^Y_19U!9)3y*|G<`SGk!RT{bGGvrqcH8?N8O`3B3{^ZA{&3T{_EBZz5KfnF?hhKjF zZ6AG10~)UD-&_ke?OMirMYm4RudYwtoL#=Zy1qDje|dg-b^Y$=%lC_%pRb!I&mZD_ zb@uC-9-9YSoU+Y=y7k}TQQ7}H)Q@WauL3G>=%wRL*=S)S z@2yR;7XE>ip_wE4{~g0R#XOh`qzXXUNT5u22h9^KKd|%j{WQ)t5zlQI^ZCqvd}>*L ziL?&?X45-&6y}}QO?AK;{I?Gm?tgdNHU6uiGX4j8yl0sIZ$4OpbTcVjNg4p9-;V%r z#u!GP95=_D-#C4Uxm4NjM;zF1NjwrHz{TvYJ#29;n4LbDhcfYf!~lZ>7~qf#bj@RP zSVK9>^~U_F?(-L80`=5T*^1_^cKg<@(~M9orK>Y%C(k=|+S2IFtCwb_eAbJ0R|uV!z5V(23X%LkSwPw7i;~PBZIk|di9_9xOhga#u>r6+;H#xClfl2xS7rcg zxp|F0S9HPRZnIL*qqI`)8^50L@UC{|v!K|nW2=3NZF*Q3s0W6?K1*M>*=R@?@V`#~ z7tZ%)5n#8p25Z;ix zM1oH4+~;$%*iv(-`_vNrx@mj-Zyy162mJRA>-WDap~uI6uTuQ?YW#l|ZG(SdqWcvu ze{ZG-*5bc&T;Bih9M$-*gdP+B#TTlwIg-A2wNFK`Ea==*i}kCaUGQJL{I!V&Sd0I| zh4a5&uipQ!g!YC1g*Pv&(g20`E1z1nUjuEA|81kcZG!(+8UNk-_y4M)3haNcGV~Yj zoIkZ(zZTjB|Jy}>+r|EOTXp=mYN!(XU!?}9?f+J^CH|L1fcxzDkB5i7h4+8z_^;K_ zBjbPZc2sVW_pSn#M4o$U>3;dNGyb>O1XzpzZh8N|d(^4pKU6|{$N$`Y$I3K7?FDQ| zJL12$cl%%CzY^LL{(Dbo|La|VEof)_@7w;@=YN&Z-tqqw_P^c**qFA!KiD#w59bb9svUnTU+M5-CW zNWqH`8N3KNze!?n9=bZ`fK#}S=76LBy?hBRaPRLM&rIl&l#Rf9ndbYqQj_MgXeX+`4_UDCn{CzKt`FdE_y?6r>TyeX&b8p6Ds7@?rrp}^6}~(*)V@esuKzF3PF`P}dC}v%N59Vh>vl@#KkaVss9yh7 zLeJpR&Hy+)zk*zI!l}ksqw!v&v*5mg4OJ&WB#arbo?p$@XOIOd1QSUeI0I6M{g%h^ zB`kmuGR;zhKZ--DJt|1Utb-a81wLUgKnVDRg`5N!c#Xz0IJdgMMt*60{P?jk#xTmY z$QSkVmgAqqu`7@S5k7_vScCs=yL|tveROL&FaM|GW}@C1)S?o3>93Z3|`K3hW!1- zSgBa{o6X5&;`ubI#N%Q#`}wKnOpP>OdX2_^aRHHa4u)JrMjvQ>Gv*Ue91@A9VM8P; z5qJOshbVLkPXv4jxL>F@#enDYsHs!32hH1#_eT?%`4JqW(e#reQ-47^sqT@sLLP>E zqNSkq8fVCq>^B-Nd?@OgS=}S5#>v1`oz+^*_!3-L(7|KE0zDidNti#TZ1jKstE>K? zMPxy|lt1~DkW9GES>BhRI1jDP6$z6-Kqge79$P(-3bnJxndu(m0ZN@R)pGo4LA85u zGSs7P_5YAED#r(QiWGa0DSutrg8pBr{$02-Y+X1p6#&)cwY&J@W5MkynC_M(IS)?Nf2~4v54cduU4skZo1MN!C0)@Wz$|Kul+K_N+aoH>hlL^C0%R z#VMl|jZU+c+ityMHl(A(h5$8q(oeHq9Kd8u{jp}NAJ2^5ZMLLH;h>E!VN(+rjSi`w z4y@uJZ)gmZ*_v|(9xR*V1co@t!_+S80r-hjJeq~uvC&MKttZC7R-Col$SsO6phRIf z)nlIMVNg7s-?Q=3BAt0Cvn3OpEOvW^nDgSx1U>J|WQ-Kout-(g3^qU{OfU@fUtQR2 zl$6FQCW1t$P{?%HK1aT@rY}fX3+5z5p>z{3bGf^jZhtOI-W`eKkovZfAu6fiY`!jy4SF=@Xn2bfC*tr%g@@6td!yg*cj4V)JsIe zrBrbSBY9vLF|;!RnM?#)L4KHZ?t(L_xLNn=CT618Lc>Qn2bZL!Q(ZqND=Hxt`Cgb- z04y-0|KSpS)cuj>(Irn5Zew9q);~9)n$JvPL>L)qpUtGbG|THOpOuptB%Y{LDc zVQyr3R8em|NM&qo0PI>(liD^AzGr@gCVj>+;Nv>HT}awV+gxtAYx=y%d!U{zd89QB z)9HWj$Tnb%jWPI0Zoz!+|J3N2s?PHHjyI{)lB%yIk!+B)*_FLdg+Z^g2Eou0=#i`=c}jL0}lok&P$s z4SQ0$9Lwp{8KPx`BL-0v2%fB3XR)%|b6m%B`(4dlxAU#H^dfY7|Hq(5Tg*pLb* zXjH5@zQ-paMdAh_68J!1gGlN`Io2453$tNpBRy8iH+y=`d!viZ+zC9r09Wj+f!3i!x&W{?}n_ z0fF$7oRlh6g!1FDy2t>%5bI81|A`Ic!4qw zi+x?Tj=uTMbv)h3F?20`%*+iBaG*QZ#p)F4fQX=8LbhiVyL^sIbz`Psgm zU{*Xewu7ps2K55{Us0mY9lVND%hG>#I&O`6HoY}JfNY)3n@_ii_J~u@v)I{y`dP`n ztoby1foVFcf}$neg|0=e1hsBum)Z0Rkti5Td6U~@LrU8akoKJO{@<|vvniD|Cq7l!&>svg^`CRdS?WJ))|_4lvUm0j`ChAq@H6+_s{d?hYD)m2kiW-M)Dj6z zwir3gPgUxAVEDQhxJq3M%#&Ssw_4To()Wlqx)a)~3if&8iu1`YFnlpf8S{S8!;|9jreu#o@z zH{Rv{pR>qW@_)vfcC!DPrMnsRU770ijFbN>sU+X5-tPO%HpS&?sc8Q!qDM4zXmzlr z;;^UQa71P2RR`oVOT+lDF;b1c3aX3$!~UQc|A+4I693O3XNmtQYuX9_t^Wgj{(Le? zmZK`2WQ+A9Ws{ew&!!7$xBG`byvRi^a*>Oa$^QWW0RR748JG0{ GG5`QiVcydK diff --git a/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.402-rc00/Chart.yaml b/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.402-rc00/Chart.yaml deleted file mode 100755 index fc4bdff94..000000000 --- a/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.402-rc00/Chart.yaml +++ /dev/null @@ -1,10 +0,0 @@ -annotations: - catalog.cattle.io/certified: rancher - catalog.cattle.io/hidden: "true" - catalog.cattle.io/namespace: cis-operator-system - catalog.cattle.io/release-name: rancher-cis-benchmark-crd -apiVersion: v1 -description: Installs the CRDs for rancher-cis-benchmark. -name: rancher-cis-benchmark-crd -type: application -version: 1.0.402-rc00 diff --git a/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.402-rc00/README.md b/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.402-rc00/README.md deleted file mode 100755 index f6d9ef621..000000000 --- a/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.402-rc00/README.md +++ /dev/null @@ -1,2 +0,0 @@ -# rancher-cis-benchmark-crd -A Rancher chart that installs the CRDs used by rancher-cis-benchmark. diff --git a/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.402-rc00/templates/clusterscan.yaml b/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.402-rc00/templates/clusterscan.yaml deleted file mode 100755 index beca6e1f8..000000000 --- a/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.402-rc00/templates/clusterscan.yaml +++ /dev/null @@ -1,149 +0,0 @@ -apiVersion: apiextensions.k8s.io/v1beta1 -kind: CustomResourceDefinition -metadata: - name: clusterscans.cis.cattle.io -spec: - additionalPrinterColumns: - - JSONPath: .status.lastRunScanProfileName - name: ClusterScanProfile - type: string - - JSONPath: .status.summary.total - name: Total - type: string - - JSONPath: .status.summary.pass - name: Pass - type: string - - JSONPath: .status.summary.fail - name: Fail - type: string - - JSONPath: .status.summary.skip - name: Skip - type: string - - JSONPath: .status.summary.warn - name: Warn - type: string - - JSONPath: .status.summary.notApplicable - name: Not Applicable - type: string - - JSONPath: .status.lastRunTimestamp - name: LastRunTimestamp - type: string - - JSONPath: .spec.scheduledScanConfig.cronSchedule - name: CronSchedule - type: string - group: cis.cattle.io - names: - kind: ClusterScan - plural: clusterscans - scope: Cluster - subresources: - status: {} - validation: - openAPIV3Schema: - properties: - spec: - properties: - scanProfileName: - nullable: true - type: string - scheduledScanConfig: - nullable: true - properties: - cronSchedule: - nullable: true - type: string - retentionCount: - type: integer - scanAlertRule: - nullable: true - properties: - alertOnComplete: - type: boolean - alertOnFailure: - type: boolean - type: object - type: object - scoreWarning: - enum: - - pass - - fail - nullable: true - type: string - type: object - status: - properties: - NextScanAt: - nullable: true - type: string - ScanAlertingRuleName: - nullable: true - type: string - conditions: - items: - properties: - lastTransitionTime: - nullable: true - type: string - lastUpdateTime: - nullable: true - type: string - message: - nullable: true - type: string - reason: - nullable: true - type: string - status: - nullable: true - type: string - type: - nullable: true - type: string - type: object - nullable: true - type: array - display: - nullable: true - properties: - error: - type: boolean - message: - nullable: true - type: string - state: - nullable: true - type: string - transitioning: - type: boolean - type: object - lastRunScanProfileName: - nullable: true - type: string - lastRunTimestamp: - nullable: true - type: string - observedGeneration: - type: integer - summary: - nullable: true - properties: - fail: - type: integer - notApplicable: - type: integer - pass: - type: integer - skip: - type: integer - total: - type: integer - warn: - type: integer - type: object - type: object - type: object - version: v1 - versions: - - name: v1 - served: true - storage: true diff --git a/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.402-rc00/templates/clusterscanbenchmark.yaml b/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.402-rc00/templates/clusterscanbenchmark.yaml deleted file mode 100755 index aa6fc2218..000000000 --- a/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.402-rc00/templates/clusterscanbenchmark.yaml +++ /dev/null @@ -1,55 +0,0 @@ -apiVersion: apiextensions.k8s.io/v1beta1 -kind: CustomResourceDefinition -metadata: - name: clusterscanbenchmarks.cis.cattle.io -spec: - additionalPrinterColumns: - - JSONPath: .spec.clusterProvider - name: ClusterProvider - type: string - - JSONPath: .spec.minKubernetesVersion - name: MinKubernetesVersion - type: string - - JSONPath: .spec.maxKubernetesVersion - name: MaxKubernetesVersion - type: string - - JSONPath: .spec.customBenchmarkConfigMapName - name: customBenchmarkConfigMapName - type: string - - JSONPath: .spec.customBenchmarkConfigMapNamespace - name: customBenchmarkConfigMapNamespace - type: string - group: cis.cattle.io - names: - kind: ClusterScanBenchmark - plural: clusterscanbenchmarks - scope: Cluster - subresources: - status: {} - validation: - openAPIV3Schema: - properties: - spec: - properties: - clusterProvider: - nullable: true - type: string - customBenchmarkConfigMapName: - nullable: true - type: string - customBenchmarkConfigMapNamespace: - nullable: true - type: string - maxKubernetesVersion: - nullable: true - type: string - minKubernetesVersion: - nullable: true - type: string - type: object - type: object - version: v1 - versions: - - name: v1 - served: true - storage: true diff --git a/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.402-rc00/templates/clusterscanprofile.yaml b/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.402-rc00/templates/clusterscanprofile.yaml deleted file mode 100755 index 21bb68396..000000000 --- a/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.402-rc00/templates/clusterscanprofile.yaml +++ /dev/null @@ -1,37 +0,0 @@ -apiVersion: apiextensions.k8s.io/v1beta1 -kind: CustomResourceDefinition -metadata: - name: clusterscanprofiles.cis.cattle.io -spec: - additionalPrinterColumns: - - JSONPath: .spec.benchmarkVersion - name: BenchmarkVersion - type: string - group: cis.cattle.io - names: - kind: ClusterScanProfile - plural: clusterscanprofiles - scope: Cluster - subresources: - status: {} - validation: - openAPIV3Schema: - properties: - spec: - properties: - benchmarkVersion: - nullable: true - type: string - skipTests: - items: - nullable: true - type: string - nullable: true - type: array - type: object - type: object - version: v1 - versions: - - name: v1 - served: true - storage: true diff --git a/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.402-rc00/templates/clusterscanreport.yaml b/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.402-rc00/templates/clusterscanreport.yaml deleted file mode 100755 index 017020a95..000000000 --- a/charts/rancher-cis-benchmark/rancher-cis-benchmark-crd/1.0.402-rc00/templates/clusterscanreport.yaml +++ /dev/null @@ -1,40 +0,0 @@ -apiVersion: apiextensions.k8s.io/v1beta1 -kind: CustomResourceDefinition -metadata: - name: clusterscanreports.cis.cattle.io -spec: - additionalPrinterColumns: - - JSONPath: .spec.lastRunTimestamp - name: LastRunTimestamp - type: string - - JSONPath: .spec.benchmarkVersion - name: BenchmarkVersion - type: string - group: cis.cattle.io - names: - kind: ClusterScanReport - plural: clusterscanreports - scope: Cluster - subresources: - status: {} - validation: - openAPIV3Schema: - properties: - spec: - properties: - benchmarkVersion: - nullable: true - type: string - lastRunTimestamp: - nullable: true - type: string - reportJSON: - nullable: true - type: string - type: object - type: object - version: v1 - versions: - - name: v1 - served: true - storage: true diff --git a/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/Chart.yaml b/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/Chart.yaml deleted file mode 100755 index 0906c03de..000000000 --- a/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/Chart.yaml +++ /dev/null @@ -1,18 +0,0 @@ -annotations: - catalog.cattle.io/auto-install: rancher-cis-benchmark-crd=match - catalog.cattle.io/certified: rancher - catalog.cattle.io/display-name: CIS Benchmark - catalog.cattle.io/namespace: cis-operator-system - catalog.cattle.io/os: linux - catalog.cattle.io/provides-gvr: cis.cattle.io.clusterscans/v1 - catalog.cattle.io/release-name: rancher-cis-benchmark - catalog.cattle.io/ui-component: rancher-cis-benchmark -apiVersion: v1 -appVersion: v1.0.4 -description: The cis-operator enables running CIS benchmark security scans on a kubernetes - cluster -icon: https://charts.rancher.io/assets/logos/cis-kube-bench.svg -keywords: -- security -name: rancher-cis-benchmark -version: 1.0.402-rc00 diff --git a/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/README.md b/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/README.md deleted file mode 100755 index 50beab58b..000000000 --- a/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/README.md +++ /dev/null @@ -1,9 +0,0 @@ -# Rancher CIS Benchmark Chart - -The cis-operator enables running CIS benchmark security scans on a kubernetes cluster and generate compliance reports that can be downloaded. - -# Installation - -``` -helm install rancher-cis-benchmark ./ --create-namespace -n cis-operator-system -``` diff --git a/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/app-readme.md b/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/app-readme.md deleted file mode 100755 index 5e495d605..000000000 --- a/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/app-readme.md +++ /dev/null @@ -1,15 +0,0 @@ -# Rancher CIS Benchmarks - -This chart enables security scanning of the cluster using [CIS (Center for Internet Security) benchmarks](https://www.cisecurity.org/benchmark/kubernetes/). - -For more information on how to use the feature, refer to our [docs](https://rancher.com/docs/rancher/v2.x/en/cis-scans/v2.5/). - -This chart installs the following components: - -- [cis-operator](https://github.com/rancher/cis-operator) - The cis-operator handles launching the [kube-bench](https://github.com/aquasecurity/kube-bench) tool that runs a suite of CIS tests on the nodes of your Kubernetes cluster. After scans finish, the cis-operator generates a compliance report that can be downloaded. -- Scans - A scan is a CRD (`ClusterScan`) that defines when to trigger CIS scans on the cluster based on the defined profile. A report is created after the scan is completed. -- Profiles - A profile is a CRD (`ClusterScanProfile`) that defines the configuration for the CIS scan, which is the benchmark versions to use and any specific tests to skip in that benchmark. This chart installs a few default `ClusterScanProfile` custom resources with no skipped tests, which can immediately be used to launch CIS scans. -- Benchmark Versions - A benchmark version is a CRD (`ClusterScanBenchmark`) that defines the CIS benchmark version to run using kube-bench as well as the valid configuration parameters for that benchmark. This chart installs a few default `ClusterScanBenchmark` custom resources. -- Alerting Resources - Rancher's CIS Benchmark application lets you run a cluster scan on a schedule, and send alerts when scans finish. - - If you want to enable alerts to be delivered when a cluster scan completes, you need to ensure that [Rancher's Monitoring and Alerting](https://rancher.com/docs/rancher/v2.x/en/monitoring-alerting/v2.5/) application is pre-installed and the [Receivers and Routes](https://rancher.com/docs/rancher/v2.x/en/monitoring-alerting/v2.5/configuration/#alertmanager-config) are configured to send out alerts. - - Additionally, you need to set `alerts: true` in the Values YAML while installing or upgrading this chart. diff --git a/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/_helpers.tpl b/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/_helpers.tpl deleted file mode 100755 index 67f4ce116..000000000 --- a/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/_helpers.tpl +++ /dev/null @@ -1,23 +0,0 @@ -{{/* Ensure namespace is set the same everywhere */}} -{{- define "cis.namespace" -}} - {{- .Release.Namespace | default "cis-operator-system" -}} -{{- end -}} - -{{- define "system_default_registry" -}} -{{- if .Values.global.cattle.systemDefaultRegistry -}} -{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}} -{{- else -}} -{{- "" -}} -{{- end -}} -{{- end -}} - -{{/* -Windows cluster will add default taint for linux nodes, -add below linux tolerations to workloads could be scheduled to those linux nodes -*/}} -{{- define "linux_node_tolerations" -}} -- key: "cattle.io/os" - value: "linux" - effect: "NoSchedule" - operator: "Equal" -{{- end -}} diff --git a/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/alertingrule.yaml b/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/alertingrule.yaml deleted file mode 100755 index 1787c88a0..000000000 --- a/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/alertingrule.yaml +++ /dev/null @@ -1,14 +0,0 @@ -{{- if .Values.alerts.enabled -}} ---- -apiVersion: monitoring.coreos.com/v1 -kind: PodMonitor -metadata: - name: rancher-cis-pod-monitor - namespace: {{ template "cis.namespace" . }} -spec: - selector: - matchLabels: - cis.cattle.io/operator: cis-operator - podMetricsEndpoints: - - port: cismetrics -{{- end }} diff --git a/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/benchmark-cis-1.5.yaml b/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/benchmark-cis-1.5.yaml deleted file mode 100755 index 39e8b834a..000000000 --- a/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/benchmark-cis-1.5.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: cis-1.5 -spec: - clusterProvider: "" - minKubernetesVersion: "1.15.0" diff --git a/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/benchmark-cis-1.6.yaml b/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/benchmark-cis-1.6.yaml deleted file mode 100755 index 93ba064f4..000000000 --- a/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/benchmark-cis-1.6.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: cis-1.6 -spec: - clusterProvider: "" - minKubernetesVersion: "1.16.0" diff --git a/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/benchmark-eks-1.0.yaml b/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/benchmark-eks-1.0.yaml deleted file mode 100755 index bd2e32cd3..000000000 --- a/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/benchmark-eks-1.0.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: eks-1.0 -spec: - clusterProvider: eks - minKubernetesVersion: "1.15.0" diff --git a/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/benchmark-gke-1.0.yaml b/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/benchmark-gke-1.0.yaml deleted file mode 100755 index 72122e8c5..000000000 --- a/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/benchmark-gke-1.0.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: gke-1.0 -spec: - clusterProvider: gke - minKubernetesVersion: "1.15.0" diff --git a/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/benchmark-rke-cis-1.5-hardened.yaml b/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/benchmark-rke-cis-1.5-hardened.yaml deleted file mode 100755 index b5627f966..000000000 --- a/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/benchmark-rke-cis-1.5-hardened.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke-cis-1.5-hardened -spec: - clusterProvider: rke - minKubernetesVersion: "1.15.0" diff --git a/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/benchmark-rke-cis-1.5-permissive.yaml b/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/benchmark-rke-cis-1.5-permissive.yaml deleted file mode 100755 index 95f80c0f0..000000000 --- a/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/benchmark-rke-cis-1.5-permissive.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke-cis-1.5-permissive -spec: - clusterProvider: rke - minKubernetesVersion: "1.15.0" diff --git a/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/benchmark-rke-cis-1.6-hardened.yaml b/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/benchmark-rke-cis-1.6-hardened.yaml deleted file mode 100755 index d75de8154..000000000 --- a/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/benchmark-rke-cis-1.6-hardened.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke-cis-1.6-hardened -spec: - clusterProvider: rke - minKubernetesVersion: "1.16.0" diff --git a/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/benchmark-rke-cis-1.6-permissive.yaml b/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/benchmark-rke-cis-1.6-permissive.yaml deleted file mode 100755 index 52428f4a7..000000000 --- a/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/benchmark-rke-cis-1.6-permissive.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke-cis-1.6-permissive -spec: - clusterProvider: rke - minKubernetesVersion: "1.16.0" diff --git a/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/benchmark-rke2-cis-1.5-hardened.yaml b/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/benchmark-rke2-cis-1.5-hardened.yaml deleted file mode 100755 index 3d83e9bd8..000000000 --- a/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/benchmark-rke2-cis-1.5-hardened.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke2-cis-1.5-hardened -spec: - clusterProvider: rke2 - minKubernetesVersion: "1.18.0" diff --git a/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/benchmark-rke2-cis-1.5-permissive.yaml b/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/benchmark-rke2-cis-1.5-permissive.yaml deleted file mode 100755 index f66aa8f6e..000000000 --- a/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/benchmark-rke2-cis-1.5-permissive.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke2-cis-1.5-permissive -spec: - clusterProvider: rke2 - minKubernetesVersion: "1.18.0" diff --git a/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/benchmark-rke2-cis-1.6-hardened.yaml b/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/benchmark-rke2-cis-1.6-hardened.yaml deleted file mode 100755 index 3593bf371..000000000 --- a/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/benchmark-rke2-cis-1.6-hardened.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke2-cis-1.6-hardened -spec: - clusterProvider: rke2 - minKubernetesVersion: "1.20.5" diff --git a/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/benchmark-rke2-cis-1.6-permissive.yaml b/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/benchmark-rke2-cis-1.6-permissive.yaml deleted file mode 100755 index 522f846ae..000000000 --- a/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/benchmark-rke2-cis-1.6-permissive.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke2-cis-1.6-permissive -spec: - clusterProvider: rke2 - minKubernetesVersion: "1.20.5" diff --git a/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/cis-roles.yaml b/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/cis-roles.yaml deleted file mode 100755 index 23c93dc65..000000000 --- a/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/cis-roles.yaml +++ /dev/null @@ -1,49 +0,0 @@ ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - name: cis-admin -rules: - - apiGroups: - - cis.cattle.io - resources: - - clusterscanbenchmarks - - clusterscanprofiles - - clusterscans - - clusterscanreports - verbs: ["create", "update", "delete", "patch","get", "watch", "list"] - - apiGroups: - - catalog.cattle.io - resources: ["apps"] - resourceNames: ["rancher-cis-benchmark"] - verbs: ["get", "watch", "list"] - - apiGroups: - - "" - resources: - - configmaps - verbs: - - '*' ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - name: cis-view -rules: - - apiGroups: - - cis.cattle.io - resources: - - clusterscanbenchmarks - - clusterscanprofiles - - clusterscans - - clusterscanreports - verbs: ["get", "watch", "list"] - - apiGroups: - - catalog.cattle.io - resources: ["apps"] - resourceNames: ["rancher-cis-benchmark"] - verbs: ["get", "watch", "list"] - - apiGroups: - - "" - resources: - - configmaps - verbs: ["get", "watch", "list"] diff --git a/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/configmap.yaml b/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/configmap.yaml deleted file mode 100755 index 620d9abfa..000000000 --- a/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/configmap.yaml +++ /dev/null @@ -1,16 +0,0 @@ -kind: ConfigMap -apiVersion: v1 -metadata: - name: default-clusterscanprofiles - namespace: {{ template "cis.namespace" . }} -data: - # Default ClusterScanProfiles per cluster provider type - rke: |- - <1.16.0: rke-profile-permissive-1.5 - >=1.16.0: rke-profile-permissive-1.6 - rke2: |- - <1.20.0: rke2-cis-1.5-profile-permissive - >=1.20.0: rke2-cis-1.6-profile-permissive - eks: "eks-profile" - gke: "gke-profile" - default: "cis-1.6-profile" diff --git a/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/deployment.yaml b/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/deployment.yaml deleted file mode 100755 index 0d3c75e39..000000000 --- a/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/deployment.yaml +++ /dev/null @@ -1,57 +0,0 @@ -apiVersion: apps/v1 -kind: Deployment -metadata: - name: cis-operator - namespace: {{ template "cis.namespace" . }} - labels: - cis.cattle.io/operator: cis-operator -spec: - selector: - matchLabels: - cis.cattle.io/operator: cis-operator - template: - metadata: - labels: - cis.cattle.io/operator: cis-operator - spec: - serviceAccountName: cis-operator-serviceaccount - containers: - - name: cis-operator - image: '{{ template "system_default_registry" . }}{{ .Values.image.cisoperator.repository }}:{{ .Values.image.cisoperator.tag }}' - imagePullPolicy: Always - ports: - - name: cismetrics - containerPort: {{ .Values.alerts.metricsPort }} - env: - - name: SECURITY_SCAN_IMAGE - value: {{ template "system_default_registry" . }}{{ .Values.image.securityScan.repository }} - - name: SECURITY_SCAN_IMAGE_TAG - value: {{ .Values.image.securityScan.tag }} - - name: SONOBUOY_IMAGE - value: {{ template "system_default_registry" . }}{{ .Values.image.sonobuoy.repository }} - - name: SONOBUOY_IMAGE_TAG - value: {{ .Values.image.sonobuoy.tag }} - - name: CIS_ALERTS_METRICS_PORT - value: '{{ .Values.alerts.metricsPort }}' - - name: CIS_ALERTS_SEVERITY - value: {{ .Values.alerts.severity }} - - name: CIS_ALERTS_ENABLED - value: {{ .Values.alerts.enabled | default "false" | quote }} - - name: CLUSTER_NAME - value: {{ .Values.global.cattle.clusterName }} - resources: - {{- toYaml .Values.resources | nindent 12 }} - nodeSelector: - kubernetes.io/os: linux - {{- with .Values.nodeSelector }} - {{- toYaml . | nindent 8 }} - {{- end }} - {{- with .Values.affinity }} - affinity: - {{- toYaml . | nindent 8 }} - {{- end }} - tolerations: - {{- include "linux_node_tolerations" . | nindent 8}} - {{- with .Values.tolerations }} - {{- toYaml . | nindent 8 }} - {{- end }} \ No newline at end of file diff --git a/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/network_policy_allow_all.yaml b/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/network_policy_allow_all.yaml deleted file mode 100755 index 6ed5d645e..000000000 --- a/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/network_policy_allow_all.yaml +++ /dev/null @@ -1,15 +0,0 @@ ---- -apiVersion: networking.k8s.io/v1 -kind: NetworkPolicy -metadata: - name: default-allow-all - namespace: {{ template "cis.namespace" . }} -spec: - podSelector: {} - ingress: - - {} - egress: - - {} - policyTypes: - - Ingress - - Egress diff --git a/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/patch_default_serviceaccount.yaml b/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/patch_default_serviceaccount.yaml deleted file mode 100755 index 1efa3ed1c..000000000 --- a/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/patch_default_serviceaccount.yaml +++ /dev/null @@ -1,20 +0,0 @@ ---- -apiVersion: batch/v1 -kind: Job -metadata: - name: patch-sa - annotations: - "helm.sh/hook": post-install, post-upgrade - "helm.sh/hook-delete-policy": hook-succeeded, before-hook-creation -spec: - template: - spec: - serviceAccountName: cis-operator-serviceaccount - restartPolicy: Never - containers: - - name: sa - image: "{{ template "system_default_registry" . }}{{ .Values.global.kubectl.repository }}:{{ .Values.global.kubectl.tag }}" - imagePullPolicy: {{ .Values.global.imagePullPolicy }} - command: ["kubectl", "patch", "serviceaccount", "default", "-p", "{\"automountServiceAccountToken\": false}"] - args: ["-n", {{ template "cis.namespace" . }}] - backoffLimit: 1 diff --git a/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/rbac.yaml b/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/rbac.yaml deleted file mode 100755 index 816991f23..000000000 --- a/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/rbac.yaml +++ /dev/null @@ -1,43 +0,0 @@ -apiVersion: rbac.authorization.k8s.io/v1beta1 -kind: ClusterRole -metadata: - labels: - app.kubernetes.io/name: rancher-cis-benchmark - app.kubernetes.io/instance: release-name - name: cis-operator-role -rules: -- apiGroups: - - '*' - resources: - - '*' - verbs: - - '*' ---- -apiVersion: rbac.authorization.k8s.io/v1beta1 -kind: ClusterRoleBinding -metadata: - labels: - app.kubernetes.io/name: rancher-cis-benchmark - app.kubernetes.io/instance: release-name - name: cis-operator-rolebinding -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: cis-operator-role -subjects: -- kind: ServiceAccount - name: cis-serviceaccount - namespace: {{ template "cis.namespace" . }} ---- -kind: ClusterRoleBinding -apiVersion: rbac.authorization.k8s.io/v1 -metadata: - name: cis-operator-installer -subjects: -- kind: ServiceAccount - name: cis-operator-serviceaccount - namespace: {{ template "cis.namespace" . }} -roleRef: - kind: ClusterRole - name: cluster-admin - apiGroup: rbac.authorization.k8s.io \ No newline at end of file diff --git a/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/scanprofile-cis-1.5.yml b/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/scanprofile-cis-1.5.yml deleted file mode 100755 index d69ae9dd5..000000000 --- a/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/scanprofile-cis-1.5.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: cis-1.5-profile - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: cis-1.5 diff --git a/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/scanprofile-cis-1.6.yaml b/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/scanprofile-cis-1.6.yaml deleted file mode 100755 index 8a8d8bf88..000000000 --- a/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/scanprofile-cis-1.6.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: cis-1.6-profile - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: cis-1.6 diff --git a/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/scanprofile-rke-1.5-hardened.yml b/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/scanprofile-rke-1.5-hardened.yml deleted file mode 100755 index 4eabe158a..000000000 --- a/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/scanprofile-rke-1.5-hardened.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: rke-profile-hardened-1.5 - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: rke-cis-1.5-hardened \ No newline at end of file diff --git a/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/scanprofile-rke-1.5-permissive.yml b/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/scanprofile-rke-1.5-permissive.yml deleted file mode 100755 index 1f78751d1..000000000 --- a/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/scanprofile-rke-1.5-permissive.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: rke-profile-permissive-1.5 - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: rke-cis-1.5-permissive diff --git a/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/scanprofile-rke-1.6-hardened.yaml b/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/scanprofile-rke-1.6-hardened.yaml deleted file mode 100755 index d38febd80..000000000 --- a/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/scanprofile-rke-1.6-hardened.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: rke-profile-hardened-1.6 - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: rke-cis-1.6-hardened diff --git a/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/scanprofile-rke-1.6-permissive.yaml b/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/scanprofile-rke-1.6-permissive.yaml deleted file mode 100755 index d31b5b0d2..000000000 --- a/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/scanprofile-rke-1.6-permissive.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: rke-profile-permissive-1.6 - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: rke-cis-1.6-permissive diff --git a/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/scanprofile-rke2-cis-1.5-hardened.yml b/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/scanprofile-rke2-cis-1.5-hardened.yml deleted file mode 100755 index 83eb3131e..000000000 --- a/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/scanprofile-rke2-cis-1.5-hardened.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: rke2-cis-1.5-profile-hardened - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: rke2-cis-1.5-hardened diff --git a/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/scanprofile-rke2-cis-1.5-permissive.yml b/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/scanprofile-rke2-cis-1.5-permissive.yml deleted file mode 100755 index 40dc44bdf..000000000 --- a/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/scanprofile-rke2-cis-1.5-permissive.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: rke2-cis-1.5-profile-permissive - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: rke2-cis-1.5-permissive diff --git a/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/scanprofile-rke2-cis-1.6-hardened.yml b/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/scanprofile-rke2-cis-1.6-hardened.yml deleted file mode 100755 index c7ac7f949..000000000 --- a/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/scanprofile-rke2-cis-1.6-hardened.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: rke2-cis-1.6-profile-hardened - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: rke2-cis-1.6-hardened diff --git a/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/scanprofile-rke2-cis-1.6-permissive.yml b/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/scanprofile-rke2-cis-1.6-permissive.yml deleted file mode 100755 index 96ca1345a..000000000 --- a/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/scanprofile-rke2-cis-1.6-permissive.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: rke2-cis-1.6-profile-permissive - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: rke2-cis-1.6-permissive diff --git a/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/scanprofileeks.yml b/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/scanprofileeks.yml deleted file mode 100755 index 49c7e0246..000000000 --- a/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/scanprofileeks.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: eks-profile - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: eks-1.0 \ No newline at end of file diff --git a/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/scanprofilegke.yml b/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/scanprofilegke.yml deleted file mode 100755 index 2ddd0686f..000000000 --- a/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/scanprofilegke.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: gke-profile - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: gke-1.0 \ No newline at end of file diff --git a/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/serviceaccount.yaml b/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/serviceaccount.yaml deleted file mode 100755 index ec48ec622..000000000 --- a/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/serviceaccount.yaml +++ /dev/null @@ -1,14 +0,0 @@ -apiVersion: v1 -kind: ServiceAccount -metadata: - namespace: {{ template "cis.namespace" . }} - name: cis-operator-serviceaccount ---- -apiVersion: v1 -kind: ServiceAccount -metadata: - namespace: {{ template "cis.namespace" . }} - labels: - app.kubernetes.io/name: rancher-cis-benchmark - app.kubernetes.io/instance: release-name - name: cis-serviceaccount diff --git a/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/validate-install-crd.yaml b/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/validate-install-crd.yaml deleted file mode 100755 index 562295791..000000000 --- a/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/templates/validate-install-crd.yaml +++ /dev/null @@ -1,17 +0,0 @@ -#{{- if gt (len (lookup "rbac.authorization.k8s.io/v1" "ClusterRole" "" "")) 0 -}} -# {{- $found := dict -}} -# {{- set $found "cis.cattle.io/v1/ClusterScan" false -}} -# {{- set $found "cis.cattle.io/v1/ClusterScanBenchmark" false -}} -# {{- set $found "cis.cattle.io/v1/ClusterScanProfile" false -}} -# {{- set $found "cis.cattle.io/v1/ClusterScanReport" false -}} -# {{- range .Capabilities.APIVersions -}} -# {{- if hasKey $found (toString .) -}} -# {{- set $found (toString .) true -}} -# {{- end -}} -# {{- end -}} -# {{- range $_, $exists := $found -}} -# {{- if (eq $exists false) -}} -# {{- required "Required CRDs are missing. Please install the corresponding CRD chart before installing this chart." "" -}} -# {{- end -}} -# {{- end -}} -#{{- end -}} \ No newline at end of file diff --git a/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/values.yaml b/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/values.yaml deleted file mode 100755 index ff4a49495..000000000 --- a/charts/rancher-cis-benchmark/rancher-cis-benchmark/1.0.402-rc00/values.yaml +++ /dev/null @@ -1,45 +0,0 @@ -# Default values for rancher-cis-benchmark. -# This is a YAML-formatted file. -# Declare variables to be passed into your templates. - -image: - cisoperator: - repository: rancher/cis-operator - tag: v1.0.4-rc1 - securityScan: - repository: rancher/security-scan - tag: v0.2.3-rc1 - sonobuoy: - repository: rancher/mirrored-sonobuoy-sonobuoy - tag: v0.16.3 - -resources: {} - # We usually recommend not to specify default resources and to leave this as a conscious - # choice for the user. This also increases chances charts run on environments with little - # resources, such as Minikube. If you do want to specify resources, uncomment the following - # lines, adjust them as necessary, and remove the curly braces after 'resources:'. - # limits: - # cpu: 100m - # memory: 128Mi - # requests: - # cpu: 100m - # memory: 128Mi - -nodeSelector: {} - -tolerations: [] - -affinity: {} - -global: - cattle: - systemDefaultRegistry: "" - clusterName: "" - kubectl: - repository: rancher/kubectl - tag: v1.20.2 - -alerts: - enabled: false - severity: warning - metricsPort: 8080 diff --git a/index.yaml b/index.yaml index f9f73a6b8..8f15128d5 100755 --- a/index.yaml +++ b/index.yaml @@ -1988,28 +1988,6 @@ entries: - released/assets/rancher-backup/rancher-backup-crd-1.0.200.tgz version: 1.0.200 rancher-cis-benchmark: - - annotations: - catalog.cattle.io/auto-install: rancher-cis-benchmark-crd=match - catalog.cattle.io/certified: rancher - catalog.cattle.io/display-name: CIS Benchmark - catalog.cattle.io/namespace: cis-operator-system - catalog.cattle.io/os: linux - catalog.cattle.io/provides-gvr: cis.cattle.io.clusterscans/v1 - catalog.cattle.io/release-name: rancher-cis-benchmark - catalog.cattle.io/ui-component: rancher-cis-benchmark - apiVersion: v1 - appVersion: v1.0.4 - created: "2021-04-08T18:17:20.904146735Z" - description: The cis-operator enables running CIS benchmark security scans on - a kubernetes cluster - digest: 809d509c8302a6afc4701f7049bc68d470dc23c787dbe4183cda84638b9496a0 - icon: https://charts.rancher.io/assets/logos/cis-kube-bench.svg - keywords: - - security - name: rancher-cis-benchmark - urls: - - assets/rancher-cis-benchmark/rancher-cis-benchmark-1.0.402-rc00.tgz - version: 1.0.402-rc00 - annotations: catalog.cattle.io/auto-install: rancher-cis-benchmark-crd=match catalog.cattle.io/certified: rancher From bc72b2533a02214efc670380392ad242cd58f306 Mon Sep 17 00:00:00 2001 From: MonzElmasry Date: Fri, 9 Apr 2021 01:51:56 +0200 Subject: [PATCH 2/2] cleanup rancher-cis-benchmark-crd in index.yaml --- index.yaml | 14 -------------- 1 file changed, 14 deletions(-) diff --git a/index.yaml b/index.yaml index 8f15128d5..ef7a2fdc1 100755 --- a/index.yaml +++ b/index.yaml @@ -2142,20 +2142,6 @@ entries: - released/assets/rancher-cis-benchmark/rancher-cis-benchmark-1.0.100.tgz version: 1.0.100 rancher-cis-benchmark-crd: - - annotations: - catalog.cattle.io/certified: rancher - catalog.cattle.io/hidden: "true" - catalog.cattle.io/namespace: cis-operator-system - catalog.cattle.io/release-name: rancher-cis-benchmark-crd - apiVersion: v1 - created: "2021-04-08T18:17:20.905229149Z" - description: Installs the CRDs for rancher-cis-benchmark. - digest: 5186df40acbb556ee54098970a3334a3fbe5e1e37899418a80b726cec93b2605 - name: rancher-cis-benchmark-crd - type: application - urls: - - assets/rancher-cis-benchmark/rancher-cis-benchmark-crd-1.0.402-rc00.tgz - version: 1.0.402-rc00 - annotations: catalog.cattle.io/certified: rancher catalog.cattle.io/hidden: "true"