Generated changes

assets/index.yaml

@@ -853,10 +853,10 @@ entries:
       catalog.cattle.io/ui-component: rancher-cis-benchmark
     apiVersion: v1
     appVersion: v1.0.3
-    created: "2020-12-11T23:49:44.747325315Z"
+    created: "2020-12-15T20:06:16.120924385Z"
     description: The cis-operator enables running CIS benchmark security scans on
       a kubernetes cluster
-    digest: a00dc5b394ef15dc69be352f6c61f842bf591f0c4933058285dda7a0c020cd4a
+    digest: 73825ae1d2c51312a56368fb98607ba396758133d2c4ba62a6381df1338ecaad
     icon: https://charts.rancher.io/assets/logos/cis-kube-bench.svg
     keywords:
     - security
@@ -912,9 +912,9 @@ entries:
       catalog.cattle.io/namespace: cis-operator-system
       catalog.cattle.io/release-name: rancher-cis-benchmark-crd
     apiVersion: v1
-    created: "2020-12-11T23:49:44.747592319Z"
+    created: "2020-12-15T20:06:16.121198184Z"
     description: Installs the CRDs for rancher-cis-benchmark.
-    digest: 014ec2d41b5d82ba5489d35a8883977fb37a69fbe62950c55a71d5de7570cb11
+    digest: 466a90741c6ada1beeaa1dde673f10b36f771e7a5ca493a05d893994080a9360
     name: rancher-cis-benchmark-crd
     type: application
     urls:
@@ -2527,4 +2527,4 @@ entries:
     urls:
     - assets/rio/rio-0.8.000.tgz
     version: 0.8.000
-generated: "2020-12-14T21:58:00.468448856Z"
+generated: "2020-12-15T20:06:16.119585185Z"

charts/rancher-cis-benchmark/templates/cis-roles.yaml

@@ -12,6 +12,17 @@ rules:
       - clusterscans
       - clusterscanreports
     verbs: ["create", "update", "delete", "patch","get", "watch", "list"]
+  - apiGroups:
+      - catalog.cattle.io
+    resources: ["apps"]
+    resourceNames: ["rancher-cis-benchmark"]
+    verbs: ["get", "watch", "list"]
+  - apiGroups:
+      - ""
+    resources:
+      - configmaps
+    verbs:
+      - '*'
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
@@ -25,4 +36,14 @@ rules:
       - clusterscanprofiles
       - clusterscans
       - clusterscanreports
-    verbs: ["get", "watch", "list"]
+    verbs: ["get", "watch", "list"]
+  - apiGroups:
+      - catalog.cattle.io
+    resources: ["apps"]
+    resourceNames: ["rancher-cis-benchmark"]
+    verbs: ["get", "watch", "list"]
+  - apiGroups:
+      - ""
+    resources:
+      - configmaps
+    verbs: ["get", "watch", "list"]

charts/rancher-cis-benchmark/templates/deployment.yaml

@@ -35,6 +35,8 @@ spec:
           value: '{{ .Values.alerts.metricsPort }}'
         - name: CIS_ALERTS_SEVERITY
           value: {{ .Values.alerts.severity }}
+        - name: CIS_ALERTS_ENABLED
+          value: {{ .Values.alerts.enabled | default "false" | quote }}
         - name: CLUSTER_NAME
           value: {{ .Values.global.cattle.clusterName }}
         resources:

charts/rancher-cis-benchmark/values.yaml

@@ -5,10 +5,10 @@
 image:
   cisoperator:
     repository: rancher/cis-operator
-    tag: v1.0.3-rc3
+    tag: v1.0.3-rc4
   securityScan:
     repository: rancher/security-scan
-    tag: v0.2.2-rc2
+    tag: v0.2.2-rc4
   sonobuoy:
     repository: rancher/sonobuoy-sonobuoy
     tag: v0.16.3

index.yaml

@@ -853,10 +853,10 @@ entries:
       catalog.cattle.io/ui-component: rancher-cis-benchmark
     apiVersion: v1
     appVersion: v1.0.3
-    created: "2020-12-11T23:49:44.747325315Z"
+    created: "2020-12-15T20:06:16.120924385Z"
     description: The cis-operator enables running CIS benchmark security scans on
       a kubernetes cluster
-    digest: a00dc5b394ef15dc69be352f6c61f842bf591f0c4933058285dda7a0c020cd4a
+    digest: 73825ae1d2c51312a56368fb98607ba396758133d2c4ba62a6381df1338ecaad
     icon: https://charts.rancher.io/assets/logos/cis-kube-bench.svg
     keywords:
     - security
@@ -912,9 +912,9 @@ entries:
       catalog.cattle.io/namespace: cis-operator-system
       catalog.cattle.io/release-name: rancher-cis-benchmark-crd
     apiVersion: v1
-    created: "2020-12-11T23:49:44.747592319Z"
+    created: "2020-12-15T20:06:16.121198184Z"
     description: Installs the CRDs for rancher-cis-benchmark.
-    digest: 014ec2d41b5d82ba5489d35a8883977fb37a69fbe62950c55a71d5de7570cb11
+    digest: 466a90741c6ada1beeaa1dde673f10b36f771e7a5ca493a05d893994080a9360
     name: rancher-cis-benchmark-crd
     type: application
     urls:
@@ -2527,4 +2527,4 @@ entries:
     urls:
     - assets/rio/rio-0.8.000.tgz
     version: 0.8.000
-generated: "2020-12-14T21:58:00.468448856Z"
+generated: "2020-12-15T20:06:16.119585185Z"

sha256sum/rancher-cis-benchmark/rancher-cis-benchmark.sum

@@ -17,9 +17,9 @@ becca0471d85c022ecf824348b21c3a11d38bba0acced43ce993b021a1874390  packages/ranch
 aa45fee12fe295d93ac0890c08bc1de55bf4097fcc8f5676873dcd020fbc94ba  packages/rancher-cis-benchmark/charts/templates/benchmark-rke-cis-1.6-permissive.yaml
 0c40aef91ce41c01a8256b55125371cdc13f79f0d7fd06db0efaf5d9e5207b83  packages/rancher-cis-benchmark/charts/templates/benchmark-rke2-cis-1.5-hardened.yaml
 e720b2e7a687e597c7bd334658c33013b9d1bcf212e4dbd1e1fc4f6e9c4d6d10  packages/rancher-cis-benchmark/charts/templates/benchmark-rke2-cis-1.5-permissive.yaml
-0393b0ab137aaa765fc6476a7c1a7692f4a20227ccecb75c19cdff3114ccedb3  packages/rancher-cis-benchmark/charts/templates/cis-roles.yaml
+b0d5a77be8a1fc5e38673404e2a256b9ef8e1f3f297c1d655f75670269073d18  packages/rancher-cis-benchmark/charts/templates/cis-roles.yaml
 b9ec2ff220f9d538ac4e7a4bdb2c3ab3415d8db378de13c41fd1aff504d96b0e  packages/rancher-cis-benchmark/charts/templates/configmap.yaml
-a9370b0c6393d0eb23f360f2e5bc438e2826142aeea9c4a4463e684f792f3818  packages/rancher-cis-benchmark/charts/templates/deployment.yaml
+c65f4791cdc907b98f8c99373a47f904f1557a0de167964cd08c30c43b738b30  packages/rancher-cis-benchmark/charts/templates/deployment.yaml
 77fcc6ff5d342c3f170058b0bb6f6aa4810aa620138c7fb669b749f0a9755642  packages/rancher-cis-benchmark/charts/templates/network_policy_allow_all.yaml
 94c6519bf22bd835372d73de3ba63c9c62c99167b00bab409cd493e1899732bc  packages/rancher-cis-benchmark/charts/templates/patch_default_serviceaccount.yaml
 b0d928117df2de06bc4469dd0d8abfdb87db4e9547614181efbdc6cc164ae2d5  packages/rancher-cis-benchmark/charts/templates/rbac.yaml
@@ -34,5 +34,5 @@ b1b686333bcb9941cb83e2007dbe90810fe2dadc845a4d3271abf7ec566f89de  packages/ranch
 11ee5c240f5ea07f2112edf4c862209b578e8e042999d6072871ddd4c00750a9  packages/rancher-cis-benchmark/charts/templates/scanprofileeks.yml
 e8c359cdfb1a1b12284af75d180c21af1258caf094a47a96557877f4f5d5f50c  packages/rancher-cis-benchmark/charts/templates/scanprofilegke.yml
 6e0510dc05660d52057f0ff4d6169d70bb19ba66d9cd92ed58cd617beb6e2cc1  packages/rancher-cis-benchmark/charts/templates/serviceaccount.yaml
-ef28f2ed0d2770a1b6054614fbddc87f13881061b80c7ddf2b492dfc9832e826  packages/rancher-cis-benchmark/charts/values.yaml
+1270de87e49bdd1e7a151f375f798ab134805829ebeb70d350d738153dc3c69f  packages/rancher-cis-benchmark/charts/values.yaml
 951ad1d2a7ded610f857e3c82ee9844eddc8fdc888a70feb709bc50e1e942cb5  packages/rancher-cis-benchmark/package.yaml