From c91f89d0019edaf3f625c0103f3e94884b0ccbc6 Mon Sep 17 00:00:00 2001 From: dhruvmewada15 Date: Thu, 3 Mar 2022 23:58:15 +0530 Subject: [PATCH] make remove --- .../rancher-cis-benchmark-crd-2.0.3-rc1.tgz | Bin 1467 -> 0 bytes .../rancher-cis-benchmark-2.0.3-rc1.tgz | Bin 5214 -> 0 bytes .../2.0.3-rc1/Chart.yaml | 10 -- .../2.0.3-rc1/README.md | 2 - .../2.0.3-rc1/templates/clusterscan.yaml | 148 ------------------ .../templates/clusterscanbenchmark.yaml | 54 ------- .../templates/clusterscanprofile.yaml | 36 ----- .../templates/clusterscanreport.yaml | 39 ----- .../2.0.3-rc1/Chart.yaml | 22 --- .../rancher-cis-benchmark/2.0.3-rc1/README.md | 9 -- .../2.0.3-rc1/app-readme.md | 15 -- .../2.0.3-rc1/templates/_helpers.tpl | 23 --- .../2.0.3-rc1/templates/alertingrule.yaml | 14 -- .../templates/benchmark-aks-1.0.yaml | 8 - .../templates/benchmark-cis-1.5.yaml | 8 - .../templates/benchmark-cis-1.6.yaml | 8 - .../templates/benchmark-eks-1.0.yaml | 8 - .../templates/benchmark-gke-1.0.yaml | 8 - .../benchmark-k3s-cis-1.6-hardened.yaml | 8 - .../benchmark-k3s-cis-1.6-permissive.yaml | 8 - .../benchmark-rke-cis-1.5-hardened.yaml | 8 - .../benchmark-rke-cis-1.5-permissive.yaml | 8 - .../benchmark-rke-cis-1.6-hardened.yaml | 8 - .../benchmark-rke-cis-1.6-permissive.yaml | 8 - .../benchmark-rke2-cis-1.5-hardened.yaml | 8 - .../benchmark-rke2-cis-1.5-permissive.yaml | 8 - .../benchmark-rke2-cis-1.6-hardened.yaml | 8 - .../benchmark-rke2-cis-1.6-permissive.yaml | 8 - .../2.0.3-rc1/templates/cis-roles.yaml | 49 ------ .../2.0.3-rc1/templates/configmap.yaml | 18 --- .../2.0.3-rc1/templates/deployment.yaml | 57 ------- .../templates/network_policy_allow_all.yaml | 15 -- .../patch_default_serviceaccount.yaml | 29 ---- .../2.0.3-rc1/templates/rbac.yaml | 43 ----- .../templates/scanprofile-cis-1.5.yml | 9 -- .../templates/scanprofile-cis-1.6.yaml | 9 -- .../scanprofile-k3s-cis-1.6-hardened.yml | 9 -- .../scanprofile-k3s-cis-1.6-permissive.yml | 9 -- .../scanprofile-rke-1.5-hardened.yml | 9 -- .../scanprofile-rke-1.5-permissive.yml | 9 -- .../scanprofile-rke-1.6-hardened.yaml | 9 -- .../scanprofile-rke-1.6-permissive.yaml | 9 -- .../scanprofile-rke2-cis-1.5-hardened.yml | 9 -- .../scanprofile-rke2-cis-1.5-permissive.yml | 9 -- .../scanprofile-rke2-cis-1.6-hardened.yml | 9 -- .../scanprofile-rke2-cis-1.6-permissive.yml | 9 -- .../2.0.3-rc1/templates/scanprofileaks.yml | 9 -- .../2.0.3-rc1/templates/scanprofileeks.yml | 9 -- .../2.0.3-rc1/templates/scanprofilegke.yml | 9 -- .../2.0.3-rc1/templates/serviceaccount.yaml | 14 -- .../templates/validate-install-crd.yaml | 17 -- .../2.0.3-rc1/values.yaml | 50 ------ index.yaml | 40 ----- 53 files changed, 959 deletions(-) delete mode 100644 assets/rancher-cis-benchmark-crd/rancher-cis-benchmark-crd-2.0.3-rc1.tgz delete mode 100644 assets/rancher-cis-benchmark/rancher-cis-benchmark-2.0.3-rc1.tgz delete mode 100644 charts/rancher-cis-benchmark-crd/2.0.3-rc1/Chart.yaml delete mode 100644 charts/rancher-cis-benchmark-crd/2.0.3-rc1/README.md delete mode 100644 charts/rancher-cis-benchmark-crd/2.0.3-rc1/templates/clusterscan.yaml delete mode 100644 charts/rancher-cis-benchmark-crd/2.0.3-rc1/templates/clusterscanbenchmark.yaml delete mode 100644 charts/rancher-cis-benchmark-crd/2.0.3-rc1/templates/clusterscanprofile.yaml delete mode 100644 charts/rancher-cis-benchmark-crd/2.0.3-rc1/templates/clusterscanreport.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc1/Chart.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc1/README.md delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc1/app-readme.md delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc1/templates/_helpers.tpl delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc1/templates/alertingrule.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc1/templates/benchmark-aks-1.0.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc1/templates/benchmark-cis-1.5.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc1/templates/benchmark-cis-1.6.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc1/templates/benchmark-eks-1.0.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc1/templates/benchmark-gke-1.0.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc1/templates/benchmark-k3s-cis-1.6-hardened.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc1/templates/benchmark-k3s-cis-1.6-permissive.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc1/templates/benchmark-rke-cis-1.5-hardened.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc1/templates/benchmark-rke-cis-1.5-permissive.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc1/templates/benchmark-rke-cis-1.6-hardened.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc1/templates/benchmark-rke-cis-1.6-permissive.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc1/templates/benchmark-rke2-cis-1.5-hardened.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc1/templates/benchmark-rke2-cis-1.5-permissive.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc1/templates/benchmark-rke2-cis-1.6-hardened.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc1/templates/benchmark-rke2-cis-1.6-permissive.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc1/templates/cis-roles.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc1/templates/configmap.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc1/templates/deployment.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc1/templates/network_policy_allow_all.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc1/templates/patch_default_serviceaccount.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc1/templates/rbac.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc1/templates/scanprofile-cis-1.5.yml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc1/templates/scanprofile-cis-1.6.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc1/templates/scanprofile-k3s-cis-1.6-hardened.yml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc1/templates/scanprofile-k3s-cis-1.6-permissive.yml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc1/templates/scanprofile-rke-1.5-hardened.yml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc1/templates/scanprofile-rke-1.5-permissive.yml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc1/templates/scanprofile-rke-1.6-hardened.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc1/templates/scanprofile-rke-1.6-permissive.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc1/templates/scanprofile-rke2-cis-1.5-hardened.yml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc1/templates/scanprofile-rke2-cis-1.5-permissive.yml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc1/templates/scanprofile-rke2-cis-1.6-hardened.yml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc1/templates/scanprofile-rke2-cis-1.6-permissive.yml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc1/templates/scanprofileaks.yml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc1/templates/scanprofileeks.yml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc1/templates/scanprofilegke.yml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc1/templates/serviceaccount.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc1/templates/validate-install-crd.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.3-rc1/values.yaml diff --git a/assets/rancher-cis-benchmark-crd/rancher-cis-benchmark-crd-2.0.3-rc1.tgz b/assets/rancher-cis-benchmark-crd/rancher-cis-benchmark-crd-2.0.3-rc1.tgz deleted file mode 100644 index e6038ec38ae1e7280cb64882d83376693c0d5da0..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1467 zcmV;s1w{HEiwG0|00000|0w_~VMtOiV@ORlOnEsqVl!4SWK%V1T2nbTPgYhoO;>Dc zVQyr3R8em|NM&qo0PI>(bK*7-&NIJ4bA85V10fyWa@@6ZZ7-K0>GgS$H=v6xd8BoE zOsD_7BijkKu`vciu5;`QgCu_|+24LEt*t@wCF(vGrawo?mm%oKKG*)+=@K+KD+q&& z1I=|^cRU&;zpm?+f8EQ$=)xNf+`-j&;0~`YTyN}Nc^Aw*)bTDB8v=dd9_*{Uxc`ZP zl!}0al4jCli~~WS77hoZ03D&;a?~Uq1o{(}aiwzDQusc~34232#y6EiB!p-p;5cEH zZ7MdulL%|w2jrrKVcXJKxp3bAU1^B zaFBcH!S?v~+=1s6Sxn>@)8Jx`pL?fRjRasl!gW7TEO>{wLx&Jg(TEd z6~v*;X4Yq4jgq%O%L#J~0ma4%z|bs~cAmFdJ%|8rAWXrY?@Ded*^sO|6%|8T$VIIK z6Ne$_l|zakDB#}bT3SIxU`zq&cHPhl=mA7=O24cdS^=3y5fy;$)(x$I{st`zK!2?p zS^-H#*QwgigW}`7QN%X7cEZlMaxX$O1YvQ-e^hri07u9j!<<~2rC_- z=3kLh4S^~<4ObeizzA8v9F%dm+1h70_02cuv~+FzlDlToSrG3SdN=ruY-n6puxkIP zyL;xEkPAzl1=n&Taj$<-7!sVV%=|B zR5%0d2Vs-_o_n%KQSoqgxiUE^?sus@KJ9a5Eu||v3XQK_2>C&+W&LkmDs52+Y^eVa zu14ch{ckuJUY+ZIr?6w!|6T~wVIlC{GiK6VQ4w4_ecjSvgxtxdb*t5r@LwdeP!TNk z?NI6oh5S99qn1c$vgcPo{!~9;7kK#A0AD{~2Y8+^>E$V=C6`YSZB$Hm7uOnvbe*27x7?po`AOd*cId2%@SWmUgkyL3hitA|=Km-?jkJ3W*pUCd%fYae z{|8sY%X9ueg&jNpXN2i6`{&=CRpkC>huvrX?@8caLiGq@Wlx;GPa>c7TFwf-usN&m-}mu3AQd*|;zPGZN_|CBHt z%Kt0@tW*EY-RmFwj`WWIU~ytUP$D~KjXNdUZ+D+>PPmUhLj2e3|Lnu{`%fR7&_CEm z)AzsLXi)n8_j2T&>whP)pSFDLdd+5OALC2V#Ape`#Kz~eu|c2BS9PD%zV-^wcDA#f V?QB){UjP6A|Nj&aYmopn006j}<5BDc zVQyr3R8em|NM&qo0PJ0TZ`(MN@4x3yF>s$l+eIY5CMk@24#=jtMQ)pJk#zULqR%2_ zq_NG%GO3bOyuNI{%YBynWCxOxEX#8I5?e`kH7FWcB8TLVznLK^4FzG|5QXDW>D(am zhGQZ|jng3!%AJyN@L~tlY&M%m-LCoDY&P?MTZf0;7p-o))oeBoo6XLPX6vxiJbVGo zT@=2GBB_XY(R_4S`Nn-CL>S|WD9V}a)c`!ANWcfKN0bWCrMy8R#U09|B0ew);SX1qMhY#_}xexWasD8fqEY zIys8-pfFiP9gmMg&XB2P>`6#}N$Pvss*y09{cO8Ux8n$}Rr67Lf`-c6|1`w8{sCm< zCO`=yVvMqZ85n5^Akm8iRZ}p+1I~be9vFh5Lemqr9X0A{?n9+Q*=saBt>2^@*V+to zDN)Hrzz1A5bOp@tG6lKvc2FDPbi#!%do?F5wDyo_(~g=o^r^94M8*35mIM*XT^WEC z`oG=o9_97_VYglB|1#($yu&_;0tL3uq0dF}h<0l);nR>xpb`lDdUEmJ>2onAN}&&Z z8lX<_4!wW~gj*u0#jWCSgAi(b`9PWCFy)Z|h2tjIu|8BLxYs`c1cqEv z#l@FTD`bU_t?M;Qh;80ge_;3q;j?BGH`K*nP)4=Vbm6?O`xtx<6T;?NlF1e^ z+gfER*XKdNCzK5g_kc2;g!uo8q-P&ruy`XUuzeXt6%~50A$14obiwEz_3eCF` zHN^uxcoUDyfe}u7ko7vuz)67s^|P-L3F_vq0cj8FhL^pC{XTlC2Os#AH$*=QuvR1e zK4nx*%`mGC0)9h+*u7H$+QDocpBVj@IG|GL=F~0M*lvC>7S7z$4f0g590_rPIZU>j zdf1Zyg%zZ==6(yJdW*u;bV3BP17M6wP)~m3LiONn^KJ84TFyTQ72E$*J2$R} z7=$RKtHP~afmQRrcB`GU|Hns1$CdprgYNDc-@zG^kw8eNNZQ0pw3=CxF@gr^bTUMN z@Ll8nzIJ!#XsbjSLS4^g(wud0?zLgl3EWFN193m3eE&#oS-oHqW;5%o+6e0Fxq@t> z>zKo}h*j1s7wv=li}hTs%1fpzg{m&i77EH#AL{=u8}+RiU?4I5QD1CDu0@USYX7h^ z#YD@(ga!c+-%rJ(2xZEcZlmczTNimy(@AbH;FI`v#+GO^JK3V$JxNX%&l=(gQ$o&hOqBcfFe4>bU{1%r=Lhd^;ulRYqJa>1O&JGu>iwpPnH9ec? z8Q*c{ZUdMF$oJ$118Hx-{4!f(rhal$$dLON*5y27e#j|Pv1c9{57eVF_DEBG_2*Gn ztMETtNF_I!Q z_HRDg#cyE}=m{QWKc>^;wCH-vZ5_JJ`kw__-vq6Xf1RS`9_|JIodx`NTNVDxpxxp> z9wW=~Z&s2j_&*=o6#qwM;lJAdDTVfd|D&z(e^lYWWLh8pSgQYD+5d8AxA@0Z{y$d! z|MQ~t@jn=0iTH0<^Z!z4xA>38$a4G-Mp)thInny~A9Z9h2XKZ&_{h*-PZ_Mle>cDW z-#KhGEBu#1yTyOe7+J0iMx6(pfp*h9tdzl?X*>Lzcb}!Cw`=VQuEu|U{@-o2k1G6^ zLHoo1Y>ZSI;Q7+}_!lEg_5ez-|Hqa6FNJoC|DrLn9Q~r23_Lk)hyT6X|8}#o|E19W z@V}1zuQb3@(>C}oWBz|!t^b!o`@;V^^Z!-ouXY3XPutl3jhzIzuN!XJ8g;o{oDUeh5s^WkNDq( z{jW5@o@o{S^?kvEM+Jjhf&X@^nScMc+3HmOe<_s5zqlcuOCmMog8q*Q{^5?^$|7BG z$pc*S2@vtel+{EOVEiFH3F!}lM`8M9zB8|A;+RrN#I9MQS!B#~aLS^mq2PTQVBxdE zn*u{FlznuI;zsu1bKMh26xI)*9)*5<>#&Npr^*#9d2TR9Z#Xw%CVB+Q3wUR2m|gfgdC zoo*7wC*eB_L7SOne2jTQh$0P>76;K5pr#?#K+hg}@P}iR)PLCRLc0eU*C;auF<}XG zx+G5c0|}2T>vop6o`~evHy84z1uUdKDo%|f*@HTcWb#<6Go|k5LeOK$83c&^d&eS80PM3)fYzLGj zWVeeYT%Dc%e0l!q*Xyg(lMmPD7bicQWr~U;S3W|1*-+#20$ism*Pl*)D6Gx{g;>!q za{uYWPv8Ii)35tzV;sWKAl}&e>k})?(X7Hwwb`*S*{DSKuvdd4k-RB83!q|Sq%C=fKlcnQ_yP9IOW5j zTUr(jeO8PKFrO5XWin%(txcx%xAQ6D@Qh11CxOvtNzzd1+n17y=$@pZ%nKs_ftb2; z{Fm1`8{~H@VLW92SNVSo)r5=Db!hbZH3EzFUYIizS{Ks-Azn~ZQ zH)Vr`g}e{;k+tv-%nZ#K(f@B5)-~jQszK~A8I%nK%6N6q+`;?}J3c>6!(elcj_q2JFV;LfK}^1M@Ng_e|M|>-%==#{~O)kGtB=tzbQbv85E8r zHGtgtaRBup24hza8$-@V^&W&=s^t8*1N$oq2ZH#xnB1|OEsh0qy$9x|j64s~NB;nB zu+IfL=C;|ap`4|9V}4fm_{rFMhPc4^@5WUrc7lrit1ZeCs0Y4E=4&6cQ@e5&YP#G~ zJol_`HLr+W()h%f=Pd$`)55q=jJ}%s4@Pg7?`~jht&^O+Qi>#HGmu9jd;KR zo{p*N!H$oSTc!Wa2Hzvkfm@~jkMr;Uw2oVcmHsbqtk9$=VrIb&2)Qv7hBukQ|41PcveEWiR+}VFR`yHl1S%) z=G6ce`+B+HWpwi|^pugk%{Q+J=dv!?*-hpLx`UR=eeIrmcr82eR8VZzu;re_CN0c# z)B{}*pUi4svRSK3AHe@A{h!(2n?-=%&>F0q|2NzD_>bMg>ih3fX!G|!%(chEJ z#iH54;;ykfU*b(f14UU6>PkddPo4X8Y-Vd}Hg%s`g5Nf6j{nUgz;A*7qgLhrl|sA6 z|52&N{)Zdc{uk@uzkQsy z|LsoY|Cd6$#DDgM>ST<>?_KW``9(ozpIWTn3~ht|O>F;*?fn0vZsq@%Li@u1!j~6i zX@JW1Z$z8pf79r%>)=1{|93jo_h02u3HJY}H1t<<|BY!I{BIWhbsPKNZC3GL%b`;2 zf0-Jfvi}>=hWIav0Q>0p&z;WE0{*M`@8!^r@xSp_whrt3jenxpgvKU1V(T?vG#j^39Z0?t8Fs2}B^6St<5rG4m{VYjk*nIBILwP#7i`v3CmsLEP)yl1s-8=gW&TC3pnx7cWbqmaBg*hjr>^q^5siy zh`~73CWXTp+y*!{UZi!_jDrXc%Xy|Ic%k9>)V)$372}_Tp(Bv^W88%fSb_g;EC2mx z>+rZ$;lC7Gf`6%@pP1Sd^mFhw@aKJNz++%X+Qh?W&Fb|jGJUJh1)S?Eh6=7?25)9M zL;m)9s8lF>jmBg$aXp$8;&L&V9Y5QcsgcGTw^sWvE?{h(gFY8yqYt#c8S)7z4v|Dt zu|5(N2|NISeH8i$j|6=7xtA$7#(?YbaYH{zZZvM&?(Yp`<`7Jy(e#}|Q+`G|vF?$! zKpq5qqNSkq8fVCq?A2-xe9r2cS=j@shS7~FIw>`q@C`Vypo52m`MNs-5;1Q`+2H^F zR~P+Ri^zhwkU#kvkwmzSS=u+CI1jAO6%ms_Kt@!d?pxiF3bnJxnQ0#5K1%&$s^$3O zf@*i+q_2D3>i<4vR1Od95XrV6QU1EH1^vHN{X1}F*g9}x3IM9}Yj^SWmyGNE<&EXw zW1ljVFc~7#J+A~E4B~;F+NbR3y&)3)n+)}XT0 zO%JisHI5lAsdSt)Uw7*rvpyX}HpsBSlfIj@;s7Q?>J2qpeS2o~Zj&iR3PxKK343G{K29#c`&0`MZK_;?m`(}p!>www@sTX0fuBe(Gw zeM%GtQ{Cs0?gqu<@jdG=Ez+5XGMh5N$zrpYh&jz(Bv`5kos7kjY4(73Akx<1RR(iko?_u3{pJ4K(~X<=~JwcdYB@WJM)} zB3%p93V`{h_dj2vhq^t|+`8nE!c8p9((>m9RO6+2I3|n?w9jUqy)o14B%PI$=_DSh zSma5!ocKP~d`J*X=LIWK!55pjXBG~=ScQOK!)e2>Cl~KEVuQKqI2T}px##BQe<26D YqKYc2=o_W~4*&rF|64po$^g^=0GYX&aR2}S diff --git a/charts/rancher-cis-benchmark-crd/2.0.3-rc1/Chart.yaml b/charts/rancher-cis-benchmark-crd/2.0.3-rc1/Chart.yaml deleted file mode 100644 index 4759432f0..000000000 --- a/charts/rancher-cis-benchmark-crd/2.0.3-rc1/Chart.yaml +++ /dev/null @@ -1,10 +0,0 @@ -annotations: - catalog.cattle.io/certified: rancher - catalog.cattle.io/hidden: "true" - catalog.cattle.io/namespace: cis-operator-system - catalog.cattle.io/release-name: rancher-cis-benchmark-crd -apiVersion: v1 -description: Installs the CRDs for rancher-cis-benchmark. -name: rancher-cis-benchmark-crd -type: application -version: 2.0.3-rc1 diff --git a/charts/rancher-cis-benchmark-crd/2.0.3-rc1/README.md b/charts/rancher-cis-benchmark-crd/2.0.3-rc1/README.md deleted file mode 100644 index f6d9ef621..000000000 --- a/charts/rancher-cis-benchmark-crd/2.0.3-rc1/README.md +++ /dev/null @@ -1,2 +0,0 @@ -# rancher-cis-benchmark-crd -A Rancher chart that installs the CRDs used by rancher-cis-benchmark. diff --git a/charts/rancher-cis-benchmark-crd/2.0.3-rc1/templates/clusterscan.yaml b/charts/rancher-cis-benchmark-crd/2.0.3-rc1/templates/clusterscan.yaml deleted file mode 100644 index 3cbb0ffcd..000000000 --- a/charts/rancher-cis-benchmark-crd/2.0.3-rc1/templates/clusterscan.yaml +++ /dev/null @@ -1,148 +0,0 @@ -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - name: clusterscans.cis.cattle.io -spec: - group: cis.cattle.io - names: - kind: ClusterScan - plural: clusterscans - scope: Cluster - versions: - - name: v1 - served: true - storage: true - additionalPrinterColumns: - - jsonPath: .status.lastRunScanProfileName - name: ClusterScanProfile - type: string - - jsonPath: .status.summary.total - name: Total - type: string - - jsonPath: .status.summary.pass - name: Pass - type: string - - jsonPath: .status.summary.fail - name: Fail - type: string - - jsonPath: .status.summary.skip - name: Skip - type: string - - jsonPath: .status.summary.warn - name: Warn - type: string - - jsonPath: .status.summary.notApplicable - name: Not Applicable - type: string - - jsonPath: .status.lastRunTimestamp - name: LastRunTimestamp - type: string - - jsonPath: .spec.scheduledScanConfig.cronSchedule - name: CronSchedule - type: string - subresources: - status: {} - schema: - openAPIV3Schema: - properties: - spec: - properties: - scanProfileName: - nullable: true - type: string - scheduledScanConfig: - nullable: true - properties: - cronSchedule: - nullable: true - type: string - retentionCount: - type: integer - scanAlertRule: - nullable: true - properties: - alertOnComplete: - type: boolean - alertOnFailure: - type: boolean - type: object - type: object - scoreWarning: - enum: - - pass - - fail - nullable: true - type: string - type: object - status: - properties: - NextScanAt: - nullable: true - type: string - ScanAlertingRuleName: - nullable: true - type: string - conditions: - items: - properties: - lastTransitionTime: - nullable: true - type: string - lastUpdateTime: - nullable: true - type: string - message: - nullable: true - type: string - reason: - nullable: true - type: string - status: - nullable: true - type: string - type: - nullable: true - type: string - type: object - nullable: true - type: array - display: - nullable: true - properties: - error: - type: boolean - message: - nullable: true - type: string - state: - nullable: true - type: string - transitioning: - type: boolean - type: object - lastRunScanProfileName: - nullable: true - type: string - lastRunTimestamp: - nullable: true - type: string - observedGeneration: - type: integer - summary: - nullable: true - properties: - fail: - type: integer - notApplicable: - type: integer - pass: - type: integer - skip: - type: integer - total: - type: integer - warn: - type: integer - type: object - type: object - type: object diff --git a/charts/rancher-cis-benchmark-crd/2.0.3-rc1/templates/clusterscanbenchmark.yaml b/charts/rancher-cis-benchmark-crd/2.0.3-rc1/templates/clusterscanbenchmark.yaml deleted file mode 100644 index fd291f8c3..000000000 --- a/charts/rancher-cis-benchmark-crd/2.0.3-rc1/templates/clusterscanbenchmark.yaml +++ /dev/null @@ -1,54 +0,0 @@ -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - name: clusterscanbenchmarks.cis.cattle.io -spec: - group: cis.cattle.io - names: - kind: ClusterScanBenchmark - plural: clusterscanbenchmarks - scope: Cluster - versions: - - name: v1 - served: true - storage: true - additionalPrinterColumns: - - jsonPath: .spec.clusterProvider - name: ClusterProvider - type: string - - jsonPath: .spec.minKubernetesVersion - name: MinKubernetesVersion - type: string - - jsonPath: .spec.maxKubernetesVersion - name: MaxKubernetesVersion - type: string - - jsonPath: .spec.customBenchmarkConfigMapName - name: customBenchmarkConfigMapName - type: string - - jsonPath: .spec.customBenchmarkConfigMapNamespace - name: customBenchmarkConfigMapNamespace - type: string - subresources: - status: {} - schema: - openAPIV3Schema: - properties: - spec: - properties: - clusterProvider: - nullable: true - type: string - customBenchmarkConfigMapName: - nullable: true - type: string - customBenchmarkConfigMapNamespace: - nullable: true - type: string - maxKubernetesVersion: - nullable: true - type: string - minKubernetesVersion: - nullable: true - type: string - type: object - type: object diff --git a/charts/rancher-cis-benchmark-crd/2.0.3-rc1/templates/clusterscanprofile.yaml b/charts/rancher-cis-benchmark-crd/2.0.3-rc1/templates/clusterscanprofile.yaml deleted file mode 100644 index 1e75501b7..000000000 --- a/charts/rancher-cis-benchmark-crd/2.0.3-rc1/templates/clusterscanprofile.yaml +++ /dev/null @@ -1,36 +0,0 @@ -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - name: clusterscanprofiles.cis.cattle.io -spec: - group: cis.cattle.io - names: - kind: ClusterScanProfile - plural: clusterscanprofiles - scope: Cluster - versions: - - name: v1 - served: true - storage: true - subresources: - status: {} - schema: - openAPIV3Schema: - properties: - spec: - properties: - benchmarkVersion: - nullable: true - type: string - skipTests: - items: - nullable: true - type: string - nullable: true - type: array - type: object - type: object - additionalPrinterColumns: - - jsonPath: .spec.benchmarkVersion - name: BenchmarkVersion - type: string diff --git a/charts/rancher-cis-benchmark-crd/2.0.3-rc1/templates/clusterscanreport.yaml b/charts/rancher-cis-benchmark-crd/2.0.3-rc1/templates/clusterscanreport.yaml deleted file mode 100644 index 6e8c0b7de..000000000 --- a/charts/rancher-cis-benchmark-crd/2.0.3-rc1/templates/clusterscanreport.yaml +++ /dev/null @@ -1,39 +0,0 @@ -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - name: clusterscanreports.cis.cattle.io -spec: - group: cis.cattle.io - names: - kind: ClusterScanReport - plural: clusterscanreports - scope: Cluster - versions: - - name: v1 - served: true - storage: true - additionalPrinterColumns: - - jsonPath: .spec.lastRunTimestamp - name: LastRunTimestamp - type: string - - jsonPath: .spec.benchmarkVersion - name: BenchmarkVersion - type: string - subresources: - status: {} - schema: - openAPIV3Schema: - properties: - spec: - properties: - benchmarkVersion: - nullable: true - type: string - lastRunTimestamp: - nullable: true - type: string - reportJSON: - nullable: true - type: string - type: object - type: object \ No newline at end of file diff --git a/charts/rancher-cis-benchmark/2.0.3-rc1/Chart.yaml b/charts/rancher-cis-benchmark/2.0.3-rc1/Chart.yaml deleted file mode 100644 index cd0434f55..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc1/Chart.yaml +++ /dev/null @@ -1,22 +0,0 @@ -annotations: - catalog.cattle.io/auto-install: rancher-cis-benchmark-crd=match - catalog.cattle.io/certified: rancher - catalog.cattle.io/display-name: CIS Benchmark - catalog.cattle.io/kube-version: '>=1.16.0-0' - catalog.cattle.io/namespace: cis-operator-system - catalog.cattle.io/os: linux - catalog.cattle.io/permits-os: linux,windows - catalog.cattle.io/provides-gvr: cis.cattle.io.clusterscans/v1 - catalog.cattle.io/rancher-version: '>= 2.6.0-0' - catalog.cattle.io/release-name: rancher-cis-benchmark - catalog.cattle.io/type: cluster-tool - catalog.cattle.io/ui-component: rancher-cis-benchmark -apiVersion: v1 -appVersion: v2.0.3-rc1 -description: The cis-operator enables running CIS benchmark security scans on a kubernetes - cluster -icon: https://charts.rancher.io/assets/logos/cis-kube-bench.svg -keywords: -- security -name: rancher-cis-benchmark -version: 2.0.3-rc1 diff --git a/charts/rancher-cis-benchmark/2.0.3-rc1/README.md b/charts/rancher-cis-benchmark/2.0.3-rc1/README.md deleted file mode 100644 index 50beab58b..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc1/README.md +++ /dev/null @@ -1,9 +0,0 @@ -# Rancher CIS Benchmark Chart - -The cis-operator enables running CIS benchmark security scans on a kubernetes cluster and generate compliance reports that can be downloaded. - -# Installation - -``` -helm install rancher-cis-benchmark ./ --create-namespace -n cis-operator-system -``` diff --git a/charts/rancher-cis-benchmark/2.0.3-rc1/app-readme.md b/charts/rancher-cis-benchmark/2.0.3-rc1/app-readme.md deleted file mode 100644 index 5e495d605..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc1/app-readme.md +++ /dev/null @@ -1,15 +0,0 @@ -# Rancher CIS Benchmarks - -This chart enables security scanning of the cluster using [CIS (Center for Internet Security) benchmarks](https://www.cisecurity.org/benchmark/kubernetes/). - -For more information on how to use the feature, refer to our [docs](https://rancher.com/docs/rancher/v2.x/en/cis-scans/v2.5/). - -This chart installs the following components: - -- [cis-operator](https://github.com/rancher/cis-operator) - The cis-operator handles launching the [kube-bench](https://github.com/aquasecurity/kube-bench) tool that runs a suite of CIS tests on the nodes of your Kubernetes cluster. After scans finish, the cis-operator generates a compliance report that can be downloaded. -- Scans - A scan is a CRD (`ClusterScan`) that defines when to trigger CIS scans on the cluster based on the defined profile. A report is created after the scan is completed. -- Profiles - A profile is a CRD (`ClusterScanProfile`) that defines the configuration for the CIS scan, which is the benchmark versions to use and any specific tests to skip in that benchmark. This chart installs a few default `ClusterScanProfile` custom resources with no skipped tests, which can immediately be used to launch CIS scans. -- Benchmark Versions - A benchmark version is a CRD (`ClusterScanBenchmark`) that defines the CIS benchmark version to run using kube-bench as well as the valid configuration parameters for that benchmark. This chart installs a few default `ClusterScanBenchmark` custom resources. -- Alerting Resources - Rancher's CIS Benchmark application lets you run a cluster scan on a schedule, and send alerts when scans finish. - - If you want to enable alerts to be delivered when a cluster scan completes, you need to ensure that [Rancher's Monitoring and Alerting](https://rancher.com/docs/rancher/v2.x/en/monitoring-alerting/v2.5/) application is pre-installed and the [Receivers and Routes](https://rancher.com/docs/rancher/v2.x/en/monitoring-alerting/v2.5/configuration/#alertmanager-config) are configured to send out alerts. - - Additionally, you need to set `alerts: true` in the Values YAML while installing or upgrading this chart. diff --git a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/_helpers.tpl b/charts/rancher-cis-benchmark/2.0.3-rc1/templates/_helpers.tpl deleted file mode 100644 index 67f4ce116..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/_helpers.tpl +++ /dev/null @@ -1,23 +0,0 @@ -{{/* Ensure namespace is set the same everywhere */}} -{{- define "cis.namespace" -}} - {{- .Release.Namespace | default "cis-operator-system" -}} -{{- end -}} - -{{- define "system_default_registry" -}} -{{- if .Values.global.cattle.systemDefaultRegistry -}} -{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}} -{{- else -}} -{{- "" -}} -{{- end -}} -{{- end -}} - -{{/* -Windows cluster will add default taint for linux nodes, -add below linux tolerations to workloads could be scheduled to those linux nodes -*/}} -{{- define "linux_node_tolerations" -}} -- key: "cattle.io/os" - value: "linux" - effect: "NoSchedule" - operator: "Equal" -{{- end -}} diff --git a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/alertingrule.yaml b/charts/rancher-cis-benchmark/2.0.3-rc1/templates/alertingrule.yaml deleted file mode 100644 index 1787c88a0..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/alertingrule.yaml +++ /dev/null @@ -1,14 +0,0 @@ -{{- if .Values.alerts.enabled -}} ---- -apiVersion: monitoring.coreos.com/v1 -kind: PodMonitor -metadata: - name: rancher-cis-pod-monitor - namespace: {{ template "cis.namespace" . }} -spec: - selector: - matchLabels: - cis.cattle.io/operator: cis-operator - podMetricsEndpoints: - - port: cismetrics -{{- end }} diff --git a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/benchmark-aks-1.0.yaml b/charts/rancher-cis-benchmark/2.0.3-rc1/templates/benchmark-aks-1.0.yaml deleted file mode 100644 index 1ac866253..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/benchmark-aks-1.0.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: aks-1.0 -spec: - clusterProvider: aks - minKubernetesVersion: "1.15.0" diff --git a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/benchmark-cis-1.5.yaml b/charts/rancher-cis-benchmark/2.0.3-rc1/templates/benchmark-cis-1.5.yaml deleted file mode 100644 index 39e8b834a..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/benchmark-cis-1.5.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: cis-1.5 -spec: - clusterProvider: "" - minKubernetesVersion: "1.15.0" diff --git a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/benchmark-cis-1.6.yaml b/charts/rancher-cis-benchmark/2.0.3-rc1/templates/benchmark-cis-1.6.yaml deleted file mode 100644 index 93ba064f4..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/benchmark-cis-1.6.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: cis-1.6 -spec: - clusterProvider: "" - minKubernetesVersion: "1.16.0" diff --git a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/benchmark-eks-1.0.yaml b/charts/rancher-cis-benchmark/2.0.3-rc1/templates/benchmark-eks-1.0.yaml deleted file mode 100644 index bd2e32cd3..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/benchmark-eks-1.0.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: eks-1.0 -spec: - clusterProvider: eks - minKubernetesVersion: "1.15.0" diff --git a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/benchmark-gke-1.0.yaml b/charts/rancher-cis-benchmark/2.0.3-rc1/templates/benchmark-gke-1.0.yaml deleted file mode 100644 index 72122e8c5..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/benchmark-gke-1.0.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: gke-1.0 -spec: - clusterProvider: gke - minKubernetesVersion: "1.15.0" diff --git a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/benchmark-k3s-cis-1.6-hardened.yaml b/charts/rancher-cis-benchmark/2.0.3-rc1/templates/benchmark-k3s-cis-1.6-hardened.yaml deleted file mode 100644 index 3ca9b6009..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/benchmark-k3s-cis-1.6-hardened.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: k3s-cis-1.6-hardened -spec: - clusterProvider: k3s - minKubernetesVersion: "1.20.5" diff --git a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/benchmark-k3s-cis-1.6-permissive.yaml b/charts/rancher-cis-benchmark/2.0.3-rc1/templates/benchmark-k3s-cis-1.6-permissive.yaml deleted file mode 100644 index 6d4253c6e..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/benchmark-k3s-cis-1.6-permissive.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: k3s-cis-1.6-permissive -spec: - clusterProvider: k3s - minKubernetesVersion: "1.20.5" diff --git a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/benchmark-rke-cis-1.5-hardened.yaml b/charts/rancher-cis-benchmark/2.0.3-rc1/templates/benchmark-rke-cis-1.5-hardened.yaml deleted file mode 100644 index b5627f966..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/benchmark-rke-cis-1.5-hardened.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke-cis-1.5-hardened -spec: - clusterProvider: rke - minKubernetesVersion: "1.15.0" diff --git a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/benchmark-rke-cis-1.5-permissive.yaml b/charts/rancher-cis-benchmark/2.0.3-rc1/templates/benchmark-rke-cis-1.5-permissive.yaml deleted file mode 100644 index 95f80c0f0..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/benchmark-rke-cis-1.5-permissive.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke-cis-1.5-permissive -spec: - clusterProvider: rke - minKubernetesVersion: "1.15.0" diff --git a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/benchmark-rke-cis-1.6-hardened.yaml b/charts/rancher-cis-benchmark/2.0.3-rc1/templates/benchmark-rke-cis-1.6-hardened.yaml deleted file mode 100644 index d75de8154..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/benchmark-rke-cis-1.6-hardened.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke-cis-1.6-hardened -spec: - clusterProvider: rke - minKubernetesVersion: "1.16.0" diff --git a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/benchmark-rke-cis-1.6-permissive.yaml b/charts/rancher-cis-benchmark/2.0.3-rc1/templates/benchmark-rke-cis-1.6-permissive.yaml deleted file mode 100644 index 52428f4a7..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/benchmark-rke-cis-1.6-permissive.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke-cis-1.6-permissive -spec: - clusterProvider: rke - minKubernetesVersion: "1.16.0" diff --git a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/benchmark-rke2-cis-1.5-hardened.yaml b/charts/rancher-cis-benchmark/2.0.3-rc1/templates/benchmark-rke2-cis-1.5-hardened.yaml deleted file mode 100644 index 3d83e9bd8..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/benchmark-rke2-cis-1.5-hardened.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke2-cis-1.5-hardened -spec: - clusterProvider: rke2 - minKubernetesVersion: "1.18.0" diff --git a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/benchmark-rke2-cis-1.5-permissive.yaml b/charts/rancher-cis-benchmark/2.0.3-rc1/templates/benchmark-rke2-cis-1.5-permissive.yaml deleted file mode 100644 index f66aa8f6e..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/benchmark-rke2-cis-1.5-permissive.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke2-cis-1.5-permissive -spec: - clusterProvider: rke2 - minKubernetesVersion: "1.18.0" diff --git a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/benchmark-rke2-cis-1.6-hardened.yaml b/charts/rancher-cis-benchmark/2.0.3-rc1/templates/benchmark-rke2-cis-1.6-hardened.yaml deleted file mode 100644 index 3593bf371..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/benchmark-rke2-cis-1.6-hardened.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke2-cis-1.6-hardened -spec: - clusterProvider: rke2 - minKubernetesVersion: "1.20.5" diff --git a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/benchmark-rke2-cis-1.6-permissive.yaml b/charts/rancher-cis-benchmark/2.0.3-rc1/templates/benchmark-rke2-cis-1.6-permissive.yaml deleted file mode 100644 index 522f846ae..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/benchmark-rke2-cis-1.6-permissive.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke2-cis-1.6-permissive -spec: - clusterProvider: rke2 - minKubernetesVersion: "1.20.5" diff --git a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/cis-roles.yaml b/charts/rancher-cis-benchmark/2.0.3-rc1/templates/cis-roles.yaml deleted file mode 100644 index 23c93dc65..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/cis-roles.yaml +++ /dev/null @@ -1,49 +0,0 @@ ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - name: cis-admin -rules: - - apiGroups: - - cis.cattle.io - resources: - - clusterscanbenchmarks - - clusterscanprofiles - - clusterscans - - clusterscanreports - verbs: ["create", "update", "delete", "patch","get", "watch", "list"] - - apiGroups: - - catalog.cattle.io - resources: ["apps"] - resourceNames: ["rancher-cis-benchmark"] - verbs: ["get", "watch", "list"] - - apiGroups: - - "" - resources: - - configmaps - verbs: - - '*' ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - name: cis-view -rules: - - apiGroups: - - cis.cattle.io - resources: - - clusterscanbenchmarks - - clusterscanprofiles - - clusterscans - - clusterscanreports - verbs: ["get", "watch", "list"] - - apiGroups: - - catalog.cattle.io - resources: ["apps"] - resourceNames: ["rancher-cis-benchmark"] - verbs: ["get", "watch", "list"] - - apiGroups: - - "" - resources: - - configmaps - verbs: ["get", "watch", "list"] diff --git a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/configmap.yaml b/charts/rancher-cis-benchmark/2.0.3-rc1/templates/configmap.yaml deleted file mode 100644 index 3de10e55e..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/configmap.yaml +++ /dev/null @@ -1,18 +0,0 @@ -kind: ConfigMap -apiVersion: v1 -metadata: - name: default-clusterscanprofiles - namespace: {{ template "cis.namespace" . }} -data: - # Default ClusterScanProfiles per cluster provider type - rke: |- - <1.16.0: rke-profile-permissive-1.5 - >=1.16.0: rke-profile-permissive-1.6 - rke2: |- - <1.20.5: rke2-cis-1.5-profile-permissive - >=1.20.5: rke2-cis-1.6-profile-permissive - eks: "eks-profile" - gke: "gke-profile" - aks: "aks-profile" - k3s: "k3s-cis-1.6-profile-permissive" - default: "cis-1.6-profile" diff --git a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/deployment.yaml b/charts/rancher-cis-benchmark/2.0.3-rc1/templates/deployment.yaml deleted file mode 100644 index 0d3c75e39..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/deployment.yaml +++ /dev/null @@ -1,57 +0,0 @@ -apiVersion: apps/v1 -kind: Deployment -metadata: - name: cis-operator - namespace: {{ template "cis.namespace" . }} - labels: - cis.cattle.io/operator: cis-operator -spec: - selector: - matchLabels: - cis.cattle.io/operator: cis-operator - template: - metadata: - labels: - cis.cattle.io/operator: cis-operator - spec: - serviceAccountName: cis-operator-serviceaccount - containers: - - name: cis-operator - image: '{{ template "system_default_registry" . }}{{ .Values.image.cisoperator.repository }}:{{ .Values.image.cisoperator.tag }}' - imagePullPolicy: Always - ports: - - name: cismetrics - containerPort: {{ .Values.alerts.metricsPort }} - env: - - name: SECURITY_SCAN_IMAGE - value: {{ template "system_default_registry" . }}{{ .Values.image.securityScan.repository }} - - name: SECURITY_SCAN_IMAGE_TAG - value: {{ .Values.image.securityScan.tag }} - - name: SONOBUOY_IMAGE - value: {{ template "system_default_registry" . }}{{ .Values.image.sonobuoy.repository }} - - name: SONOBUOY_IMAGE_TAG - value: {{ .Values.image.sonobuoy.tag }} - - name: CIS_ALERTS_METRICS_PORT - value: '{{ .Values.alerts.metricsPort }}' - - name: CIS_ALERTS_SEVERITY - value: {{ .Values.alerts.severity }} - - name: CIS_ALERTS_ENABLED - value: {{ .Values.alerts.enabled | default "false" | quote }} - - name: CLUSTER_NAME - value: {{ .Values.global.cattle.clusterName }} - resources: - {{- toYaml .Values.resources | nindent 12 }} - nodeSelector: - kubernetes.io/os: linux - {{- with .Values.nodeSelector }} - {{- toYaml . | nindent 8 }} - {{- end }} - {{- with .Values.affinity }} - affinity: - {{- toYaml . | nindent 8 }} - {{- end }} - tolerations: - {{- include "linux_node_tolerations" . | nindent 8}} - {{- with .Values.tolerations }} - {{- toYaml . | nindent 8 }} - {{- end }} \ No newline at end of file diff --git a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/network_policy_allow_all.yaml b/charts/rancher-cis-benchmark/2.0.3-rc1/templates/network_policy_allow_all.yaml deleted file mode 100644 index 6ed5d645e..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/network_policy_allow_all.yaml +++ /dev/null @@ -1,15 +0,0 @@ ---- -apiVersion: networking.k8s.io/v1 -kind: NetworkPolicy -metadata: - name: default-allow-all - namespace: {{ template "cis.namespace" . }} -spec: - podSelector: {} - ingress: - - {} - egress: - - {} - policyTypes: - - Ingress - - Egress diff --git a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/patch_default_serviceaccount.yaml b/charts/rancher-cis-benchmark/2.0.3-rc1/templates/patch_default_serviceaccount.yaml deleted file mode 100644 index e7beac2a9..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/patch_default_serviceaccount.yaml +++ /dev/null @@ -1,29 +0,0 @@ ---- -apiVersion: batch/v1 -kind: Job -metadata: - name: patch-sa - annotations: - "helm.sh/hook": post-install, post-upgrade - "helm.sh/hook-delete-policy": hook-succeeded, before-hook-creation -spec: - template: - spec: - serviceAccountName: cis-operator-serviceaccount - {{- with .Values.tolerations }} - tolerations: - {{- toYaml . | nindent 8 }} - {{- end }} - {{- with .Values.nodeSelector }} - nodeSelector: - {{- toYaml . | nindent 8 }} - {{- end }} - restartPolicy: Never - containers: - - name: sa - image: "{{ template "system_default_registry" . }}{{ .Values.global.kubectl.repository }}:{{ .Values.global.kubectl.tag }}" - imagePullPolicy: {{ .Values.global.imagePullPolicy }} - command: ["kubectl", "patch", "serviceaccount", "default", "-p", "{\"automountServiceAccountToken\": false}"] - args: ["-n", {{ template "cis.namespace" . }}] - - backoffLimit: 1 diff --git a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/rbac.yaml b/charts/rancher-cis-benchmark/2.0.3-rc1/templates/rbac.yaml deleted file mode 100644 index 4ff88ea5f..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/rbac.yaml +++ /dev/null @@ -1,43 +0,0 @@ -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - labels: - app.kubernetes.io/name: rancher-cis-benchmark - app.kubernetes.io/instance: release-name - name: cis-operator-role -rules: -- apiGroups: - - '*' - resources: - - '*' - verbs: - - '*' ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - labels: - app.kubernetes.io/name: rancher-cis-benchmark - app.kubernetes.io/instance: release-name - name: cis-operator-rolebinding -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: cis-operator-role -subjects: -- kind: ServiceAccount - name: cis-serviceaccount - namespace: {{ template "cis.namespace" . }} ---- -kind: ClusterRoleBinding -apiVersion: rbac.authorization.k8s.io/v1 -metadata: - name: cis-operator-installer -subjects: -- kind: ServiceAccount - name: cis-operator-serviceaccount - namespace: {{ template "cis.namespace" . }} -roleRef: - kind: ClusterRole - name: cluster-admin - apiGroup: rbac.authorization.k8s.io \ No newline at end of file diff --git a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/scanprofile-cis-1.5.yml b/charts/rancher-cis-benchmark/2.0.3-rc1/templates/scanprofile-cis-1.5.yml deleted file mode 100644 index d69ae9dd5..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/scanprofile-cis-1.5.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: cis-1.5-profile - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: cis-1.5 diff --git a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/scanprofile-cis-1.6.yaml b/charts/rancher-cis-benchmark/2.0.3-rc1/templates/scanprofile-cis-1.6.yaml deleted file mode 100644 index 8a8d8bf88..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/scanprofile-cis-1.6.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: cis-1.6-profile - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: cis-1.6 diff --git a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/scanprofile-k3s-cis-1.6-hardened.yml b/charts/rancher-cis-benchmark/2.0.3-rc1/templates/scanprofile-k3s-cis-1.6-hardened.yml deleted file mode 100644 index 095e977ab..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/scanprofile-k3s-cis-1.6-hardened.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: k3s-cis-1.6-profile-hardened - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: k3s-cis-1.6-hardened diff --git a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/scanprofile-k3s-cis-1.6-permissive.yml b/charts/rancher-cis-benchmark/2.0.3-rc1/templates/scanprofile-k3s-cis-1.6-permissive.yml deleted file mode 100644 index 3b22a80c8..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/scanprofile-k3s-cis-1.6-permissive.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: k3s-cis-1.6-profile-permissive - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: k3s-cis-1.6-permissive diff --git a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/scanprofile-rke-1.5-hardened.yml b/charts/rancher-cis-benchmark/2.0.3-rc1/templates/scanprofile-rke-1.5-hardened.yml deleted file mode 100644 index 4eabe158a..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/scanprofile-rke-1.5-hardened.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: rke-profile-hardened-1.5 - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: rke-cis-1.5-hardened \ No newline at end of file diff --git a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/scanprofile-rke-1.5-permissive.yml b/charts/rancher-cis-benchmark/2.0.3-rc1/templates/scanprofile-rke-1.5-permissive.yml deleted file mode 100644 index 1f78751d1..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/scanprofile-rke-1.5-permissive.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: rke-profile-permissive-1.5 - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: rke-cis-1.5-permissive diff --git a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/scanprofile-rke-1.6-hardened.yaml b/charts/rancher-cis-benchmark/2.0.3-rc1/templates/scanprofile-rke-1.6-hardened.yaml deleted file mode 100644 index d38febd80..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/scanprofile-rke-1.6-hardened.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: rke-profile-hardened-1.6 - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: rke-cis-1.6-hardened diff --git a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/scanprofile-rke-1.6-permissive.yaml b/charts/rancher-cis-benchmark/2.0.3-rc1/templates/scanprofile-rke-1.6-permissive.yaml deleted file mode 100644 index d31b5b0d2..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/scanprofile-rke-1.6-permissive.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: rke-profile-permissive-1.6 - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: rke-cis-1.6-permissive diff --git a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/scanprofile-rke2-cis-1.5-hardened.yml b/charts/rancher-cis-benchmark/2.0.3-rc1/templates/scanprofile-rke2-cis-1.5-hardened.yml deleted file mode 100644 index 83eb3131e..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/scanprofile-rke2-cis-1.5-hardened.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: rke2-cis-1.5-profile-hardened - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: rke2-cis-1.5-hardened diff --git a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/scanprofile-rke2-cis-1.5-permissive.yml b/charts/rancher-cis-benchmark/2.0.3-rc1/templates/scanprofile-rke2-cis-1.5-permissive.yml deleted file mode 100644 index 40dc44bdf..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/scanprofile-rke2-cis-1.5-permissive.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: rke2-cis-1.5-profile-permissive - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: rke2-cis-1.5-permissive diff --git a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/scanprofile-rke2-cis-1.6-hardened.yml b/charts/rancher-cis-benchmark/2.0.3-rc1/templates/scanprofile-rke2-cis-1.6-hardened.yml deleted file mode 100644 index c7ac7f949..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/scanprofile-rke2-cis-1.6-hardened.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: rke2-cis-1.6-profile-hardened - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: rke2-cis-1.6-hardened diff --git a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/scanprofile-rke2-cis-1.6-permissive.yml b/charts/rancher-cis-benchmark/2.0.3-rc1/templates/scanprofile-rke2-cis-1.6-permissive.yml deleted file mode 100644 index 96ca1345a..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/scanprofile-rke2-cis-1.6-permissive.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: rke2-cis-1.6-profile-permissive - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: rke2-cis-1.6-permissive diff --git a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/scanprofileaks.yml b/charts/rancher-cis-benchmark/2.0.3-rc1/templates/scanprofileaks.yml deleted file mode 100644 index ea7b25b40..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/scanprofileaks.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: aks-profile - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: aks-1.0 \ No newline at end of file diff --git a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/scanprofileeks.yml b/charts/rancher-cis-benchmark/2.0.3-rc1/templates/scanprofileeks.yml deleted file mode 100644 index 49c7e0246..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/scanprofileeks.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: eks-profile - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: eks-1.0 \ No newline at end of file diff --git a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/scanprofilegke.yml b/charts/rancher-cis-benchmark/2.0.3-rc1/templates/scanprofilegke.yml deleted file mode 100644 index 2ddd0686f..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/scanprofilegke.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: gke-profile - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: gke-1.0 \ No newline at end of file diff --git a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/serviceaccount.yaml b/charts/rancher-cis-benchmark/2.0.3-rc1/templates/serviceaccount.yaml deleted file mode 100644 index ec48ec622..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/serviceaccount.yaml +++ /dev/null @@ -1,14 +0,0 @@ -apiVersion: v1 -kind: ServiceAccount -metadata: - namespace: {{ template "cis.namespace" . }} - name: cis-operator-serviceaccount ---- -apiVersion: v1 -kind: ServiceAccount -metadata: - namespace: {{ template "cis.namespace" . }} - labels: - app.kubernetes.io/name: rancher-cis-benchmark - app.kubernetes.io/instance: release-name - name: cis-serviceaccount diff --git a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/validate-install-crd.yaml b/charts/rancher-cis-benchmark/2.0.3-rc1/templates/validate-install-crd.yaml deleted file mode 100644 index 562295791..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc1/templates/validate-install-crd.yaml +++ /dev/null @@ -1,17 +0,0 @@ -#{{- if gt (len (lookup "rbac.authorization.k8s.io/v1" "ClusterRole" "" "")) 0 -}} -# {{- $found := dict -}} -# {{- set $found "cis.cattle.io/v1/ClusterScan" false -}} -# {{- set $found "cis.cattle.io/v1/ClusterScanBenchmark" false -}} -# {{- set $found "cis.cattle.io/v1/ClusterScanProfile" false -}} -# {{- set $found "cis.cattle.io/v1/ClusterScanReport" false -}} -# {{- range .Capabilities.APIVersions -}} -# {{- if hasKey $found (toString .) -}} -# {{- set $found (toString .) true -}} -# {{- end -}} -# {{- end -}} -# {{- range $_, $exists := $found -}} -# {{- if (eq $exists false) -}} -# {{- required "Required CRDs are missing. Please install the corresponding CRD chart before installing this chart." "" -}} -# {{- end -}} -# {{- end -}} -#{{- end -}} \ No newline at end of file diff --git a/charts/rancher-cis-benchmark/2.0.3-rc1/values.yaml b/charts/rancher-cis-benchmark/2.0.3-rc1/values.yaml deleted file mode 100644 index 015e2d058..000000000 --- a/charts/rancher-cis-benchmark/2.0.3-rc1/values.yaml +++ /dev/null @@ -1,50 +0,0 @@ -# Default values for rancher-cis-benchmark. -# This is a YAML-formatted file. -# Declare variables to be passed into your templates. - -image: - cisoperator: - repository: rancher/cis-operator - tag: v1.0.7-rc1 - securityScan: - repository: rancher/security-scan - tag: v0.2.6-rc1 - sonobuoy: - repository: rancher/mirrored-sonobuoy-sonobuoy - tag: v0.53.2 - -resources: {} - # We usually recommend not to specify default resources and to leave this as a conscious - # choice for the user. This also increases chances charts run on environments with little - # resources, such as Minikube. If you do want to specify resources, uncomment the following - # lines, adjust them as necessary, and remove the curly braces after 'resources:'. - # limits: - # cpu: 100m - # memory: 128Mi - # requests: - # cpu: 100m - # memory: 128Mi - -nodeSelector: - kubernetes.io/os: linux - -tolerations: - - key: cattle.io/os - operator: "Equal" - value: "linux" - effect: NoSchedule - -affinity: {} - -global: - cattle: - systemDefaultRegistry: "" - clusterName: "" - kubectl: - repository: rancher/kubectl - tag: v1.20.2 - -alerts: - enabled: false - severity: warning - metricsPort: 8080 diff --git a/index.yaml b/index.yaml index c40fbc902..c9431a4a9 100755 --- a/index.yaml +++ b/index.yaml @@ -2282,32 +2282,6 @@ entries: - assets/rancher-backup-crd/rancher-backup-crd-1.0.200.tgz version: 1.0.200 rancher-cis-benchmark: - - annotations: - catalog.cattle.io/auto-install: rancher-cis-benchmark-crd=match - catalog.cattle.io/certified: rancher - catalog.cattle.io/display-name: CIS Benchmark - catalog.cattle.io/kube-version: '>=1.16.0-0' - catalog.cattle.io/namespace: cis-operator-system - catalog.cattle.io/os: linux - catalog.cattle.io/permits-os: linux,windows - catalog.cattle.io/provides-gvr: cis.cattle.io.clusterscans/v1 - catalog.cattle.io/rancher-version: '>= 2.6.0-0' - catalog.cattle.io/release-name: rancher-cis-benchmark - catalog.cattle.io/type: cluster-tool - catalog.cattle.io/ui-component: rancher-cis-benchmark - apiVersion: v1 - appVersion: v2.0.3-rc1 - created: "2022-03-02T17:21:23.335016572-07:00" - description: The cis-operator enables running CIS benchmark security scans on - a kubernetes cluster - digest: cddd734709ec4067df9990e6e43f5d11030bd15c4fe3fffb3d655fc6376e966b - icon: https://charts.rancher.io/assets/logos/cis-kube-bench.svg - keywords: - - security - name: rancher-cis-benchmark - urls: - - assets/rancher-cis-benchmark/rancher-cis-benchmark-2.0.3-rc1.tgz - version: 2.0.3-rc1 - annotations: catalog.cattle.io/auto-install: rancher-cis-benchmark-crd=match catalog.cattle.io/certified: rancher @@ -2519,20 +2493,6 @@ entries: - assets/rancher-cis-benchmark/rancher-cis-benchmark-1.0.100.tgz version: 1.0.100 rancher-cis-benchmark-crd: - - annotations: - catalog.cattle.io/certified: rancher - catalog.cattle.io/hidden: "true" - catalog.cattle.io/namespace: cis-operator-system - catalog.cattle.io/release-name: rancher-cis-benchmark-crd - apiVersion: v1 - created: "2022-02-25T11:29:45.94135286+05:30" - description: Installs the CRDs for rancher-cis-benchmark. - digest: aa8ed957a42c131916f0a1318306d55badcad388f3558a83c40fdd08b64f7d82 - name: rancher-cis-benchmark-crd - type: application - urls: - - assets/rancher-cis-benchmark-crd/rancher-cis-benchmark-crd-2.0.3-rc1.tgz - version: 2.0.3-rc1 - annotations: catalog.cattle.io/certified: rancher catalog.cattle.io/hidden: "true"