mirror of https://git.rancher.io/charts
Add AKS CIS Scan benchmark config
parent
c526003690
commit
b0bc7a03ba
|
@ -11,11 +11,11 @@ annotations:
|
||||||
catalog.cattle.io/type: cluster-tool
|
catalog.cattle.io/type: cluster-tool
|
||||||
catalog.cattle.io/ui-component: rancher-cis-benchmark
|
catalog.cattle.io/ui-component: rancher-cis-benchmark
|
||||||
apiVersion: v1
|
apiVersion: v1
|
||||||
appVersion: v2.0.2
|
appVersion: v2.0.3-rc1
|
||||||
description: The cis-operator enables running CIS benchmark security scans on a kubernetes
|
description: The cis-operator enables running CIS benchmark security scans on a kubernetes
|
||||||
cluster
|
cluster
|
||||||
icon: https://charts.rancher.io/assets/logos/cis-kube-bench.svg
|
icon: https://charts.rancher.io/assets/logos/cis-kube-bench.svg
|
||||||
keywords:
|
keywords:
|
||||||
- security
|
- security
|
||||||
name: rancher-cis-benchmark
|
name: rancher-cis-benchmark
|
||||||
version: 2.0.2
|
version: 2.0.3-rc1
|
||||||
|
|
|
@ -0,0 +1,8 @@
|
||||||
|
---
|
||||||
|
apiVersion: cis.cattle.io/v1
|
||||||
|
kind: ClusterScanBenchmark
|
||||||
|
metadata:
|
||||||
|
name: aks-1.0
|
||||||
|
spec:
|
||||||
|
clusterProvider: aks
|
||||||
|
minKubernetesVersion: "1.15.0"
|
|
@ -13,5 +13,6 @@ data:
|
||||||
>=1.20.5: rke2-cis-1.6-profile-permissive
|
>=1.20.5: rke2-cis-1.6-profile-permissive
|
||||||
eks: "eks-profile"
|
eks: "eks-profile"
|
||||||
gke: "gke-profile"
|
gke: "gke-profile"
|
||||||
|
aks: "aks-profile"
|
||||||
k3s: "k3s-cis-1.6-profile-permissive"
|
k3s: "k3s-cis-1.6-profile-permissive"
|
||||||
default: "cis-1.6-profile"
|
default: "cis-1.6-profile"
|
||||||
|
|
|
@ -0,0 +1,9 @@
|
||||||
|
---
|
||||||
|
apiVersion: cis.cattle.io/v1
|
||||||
|
kind: ClusterScanProfile
|
||||||
|
metadata:
|
||||||
|
name: aks-profile
|
||||||
|
annotations:
|
||||||
|
clusterscanprofile.cis.cattle.io/builtin: "true"
|
||||||
|
spec:
|
||||||
|
benchmarkVersion: aks-1.0
|
|
@ -5,10 +5,10 @@
|
||||||
image:
|
image:
|
||||||
cisoperator:
|
cisoperator:
|
||||||
repository: rancher/cis-operator
|
repository: rancher/cis-operator
|
||||||
tag: v1.0.6
|
tag: v1.0.7-rc1
|
||||||
securityScan:
|
securityScan:
|
||||||
repository: rancher/security-scan
|
repository: rancher/security-scan
|
||||||
tag: v0.2.5
|
tag: v0.2.6-rc1
|
||||||
sonobuoy:
|
sonobuoy:
|
||||||
repository: rancher/mirrored-sonobuoy-sonobuoy
|
repository: rancher/mirrored-sonobuoy-sonobuoy
|
||||||
tag: v0.53.2
|
tag: v0.53.2
|
||||||
|
|
|
@ -1,5 +1,5 @@
|
||||||
url: local
|
url: local
|
||||||
version: 2.0.2
|
version: 2.0.3-rc1
|
||||||
additionalCharts:
|
additionalCharts:
|
||||||
- workingDir: charts-crd
|
- workingDir: charts-crd
|
||||||
crdOptions:
|
crdOptions:
|
||||||
|
|
|
@ -59,3 +59,7 @@ rancher-gke-operator:
|
||||||
- 100.0.2+up1.1.3-rc1
|
- 100.0.2+up1.1.3-rc1
|
||||||
rancher-gke-operator-crd:
|
rancher-gke-operator-crd:
|
||||||
- 100.0.2+up1.1.3-rc1
|
- 100.0.2+up1.1.3-rc1
|
||||||
|
rancher-cis-benchmark:
|
||||||
|
- 2.0.3-rc1
|
||||||
|
rancher-cis-benchmark-crd:
|
||||||
|
- 2.0.3-rc1
|
||||||
|
|
Loading…
Reference in New Issue