From ddc6baa394c8e564e9e8da067b3e6cf00d86c0f2 Mon Sep 17 00:00:00 2001 From: Rayan Das Date: Fri, 22 Jul 2022 18:11:14 +0530 Subject: [PATCH] remove old rc version --- .../rancher-cis-benchmark-crd-2.0.5-rc5.tgz | Bin 1466 -> 0 bytes .../rancher-cis-benchmark-2.0.5-rc5.tgz | Bin 6162 -> 0 bytes .../2.0.5-rc5/Chart.yaml | 10 -- .../2.0.5-rc5/README.md | 2 - .../2.0.5-rc5/templates/clusterscan.yaml | 148 ------------------ .../templates/clusterscanbenchmark.yaml | 54 ------- .../templates/clusterscanprofile.yaml | 36 ----- .../templates/clusterscanreport.yaml | 39 ----- .../2.0.5-rc5/Chart.yaml | 22 --- .../rancher-cis-benchmark/2.0.5-rc5/README.md | 9 -- .../2.0.5-rc5/app-readme.md | 15 -- .../2.0.5-rc5/templates/_helpers.tpl | 27 ---- .../2.0.5-rc5/templates/alertingrule.yaml | 14 -- .../templates/benchmark-aks-1.0.yaml | 8 - .../templates/benchmark-cis-1.20.yaml | 8 - .../templates/benchmark-cis-1.23.yaml | 8 - .../templates/benchmark-cis-1.5.yaml | 8 - .../templates/benchmark-cis-1.6.yaml | 8 - .../templates/benchmark-eks-1.0.1.yaml | 8 - .../templates/benchmark-gke-1.0.yaml | 8 - .../benchmark-k3s-cis-1.20-hardened.yaml | 8 - .../benchmark-k3s-cis-1.20-permissive.yaml | 8 - .../benchmark-k3s-cis-1.23-hardened.yaml | 8 - .../benchmark-k3s-cis-1.23-permissive.yaml | 8 - .../benchmark-k3s-cis-1.6-hardened.yaml | 8 - .../benchmark-k3s-cis-1.6-permissive.yaml | 8 - .../benchmark-rke-cis-1.20-hardened.yaml | 8 - .../benchmark-rke-cis-1.20-permissive.yaml | 8 - .../benchmark-rke-cis-1.23-hardened.yaml | 8 - .../benchmark-rke-cis-1.23-permissive.yaml | 8 - .../benchmark-rke-cis-1.5-hardened.yaml | 8 - .../benchmark-rke-cis-1.5-permissive.yaml | 8 - .../benchmark-rke-cis-1.6-hardened.yaml | 8 - .../benchmark-rke-cis-1.6-permissive.yaml | 8 - .../benchmark-rke2-cis-1.20-hardened.yaml | 8 - .../benchmark-rke2-cis-1.20-permissive.yaml | 8 - .../benchmark-rke2-cis-1.23-hardened.yaml | 8 - .../benchmark-rke2-cis-1.23-permissive.yaml | 8 - .../benchmark-rke2-cis-1.5-hardened.yaml | 8 - .../benchmark-rke2-cis-1.5-permissive.yaml | 8 - .../benchmark-rke2-cis-1.6-hardened.yaml | 8 - .../benchmark-rke2-cis-1.6-permissive.yaml | 8 - .../2.0.5-rc5/templates/cis-roles.yaml | 49 ------ .../2.0.5-rc5/templates/configmap.yaml | 18 --- .../2.0.5-rc5/templates/deployment.yaml | 55 ------- .../templates/network_policy_allow_all.yaml | 15 -- .../patch_default_serviceaccount.yaml | 29 ---- .../2.0.5-rc5/templates/rbac.yaml | 43 ----- .../templates/scanprofile-cis-1.20.yaml | 9 -- .../templates/scanprofile-cis-1.23.yaml | 9 -- .../templates/scanprofile-cis-1.5.yml | 9 -- .../templates/scanprofile-cis-1.6.yaml | 9 -- .../scanprofile-k3s-cis-1.20-hardened.yml | 9 -- .../scanprofile-k3s-cis-1.20-permissive.yml | 9 -- .../scanprofile-k3s-cis-1.23-hardened.yml | 9 -- .../scanprofile-k3s-cis-1.23-permissive.yml | 9 -- .../scanprofile-k3s-cis-1.6-hardened.yml | 9 -- .../scanprofile-k3s-cis-1.6-permissive.yml | 9 -- .../scanprofile-rke-1.20-hardened.yaml | 9 -- .../scanprofile-rke-1.20-permissive.yaml | 9 -- .../scanprofile-rke-1.23-hardened.yaml | 9 -- .../scanprofile-rke-1.23-permissive.yaml | 9 -- .../scanprofile-rke-1.5-hardened.yml | 9 -- .../scanprofile-rke-1.5-permissive.yml | 9 -- .../scanprofile-rke-1.6-hardened.yaml | 9 -- .../scanprofile-rke-1.6-permissive.yaml | 9 -- .../scanprofile-rke2-cis-1.20-hardened.yml | 9 -- .../scanprofile-rke2-cis-1.20-permissive.yml | 9 -- .../scanprofile-rke2-cis-1.23-hardened.yml | 9 -- .../scanprofile-rke2-cis-1.23-permissive.yml | 9 -- .../scanprofile-rke2-cis-1.5-hardened.yml | 9 -- .../scanprofile-rke2-cis-1.5-permissive.yml | 9 -- .../scanprofile-rke2-cis-1.6-hardened.yml | 9 -- .../scanprofile-rke2-cis-1.6-permissive.yml | 9 -- .../2.0.5-rc5/templates/scanprofileaks.yml | 9 -- .../2.0.5-rc5/templates/scanprofileeks.yml | 9 -- .../2.0.5-rc5/templates/scanprofilegke.yml | 9 -- .../2.0.5-rc5/templates/serviceaccount.yaml | 14 -- .../templates/validate-install-crd.yaml | 17 -- .../2.0.5-rc5/values.yaml | 49 ------ index.yaml | 40 ----- 81 files changed, 1198 deletions(-) delete mode 100644 assets/rancher-cis-benchmark-crd/rancher-cis-benchmark-crd-2.0.5-rc5.tgz delete mode 100644 assets/rancher-cis-benchmark/rancher-cis-benchmark-2.0.5-rc5.tgz delete mode 100644 charts/rancher-cis-benchmark-crd/2.0.5-rc5/Chart.yaml delete mode 100644 charts/rancher-cis-benchmark-crd/2.0.5-rc5/README.md delete mode 100644 charts/rancher-cis-benchmark-crd/2.0.5-rc5/templates/clusterscan.yaml delete mode 100644 charts/rancher-cis-benchmark-crd/2.0.5-rc5/templates/clusterscanbenchmark.yaml delete mode 100644 charts/rancher-cis-benchmark-crd/2.0.5-rc5/templates/clusterscanprofile.yaml delete mode 100644 charts/rancher-cis-benchmark-crd/2.0.5-rc5/templates/clusterscanreport.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.5-rc5/Chart.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.5-rc5/README.md delete mode 100644 charts/rancher-cis-benchmark/2.0.5-rc5/app-readme.md delete mode 100644 charts/rancher-cis-benchmark/2.0.5-rc5/templates/_helpers.tpl delete mode 100644 charts/rancher-cis-benchmark/2.0.5-rc5/templates/alertingrule.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-aks-1.0.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-cis-1.20.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-cis-1.23.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-cis-1.5.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-cis-1.6.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-eks-1.0.1.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-gke-1.0.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-k3s-cis-1.20-hardened.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-k3s-cis-1.20-permissive.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-k3s-cis-1.23-hardened.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-k3s-cis-1.23-permissive.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-k3s-cis-1.6-hardened.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-k3s-cis-1.6-permissive.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-rke-cis-1.20-hardened.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-rke-cis-1.20-permissive.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-rke-cis-1.23-hardened.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-rke-cis-1.23-permissive.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-rke-cis-1.5-hardened.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-rke-cis-1.5-permissive.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-rke-cis-1.6-hardened.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-rke-cis-1.6-permissive.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-rke2-cis-1.20-hardened.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-rke2-cis-1.20-permissive.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-rke2-cis-1.23-hardened.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-rke2-cis-1.23-permissive.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-rke2-cis-1.5-hardened.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-rke2-cis-1.5-permissive.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-rke2-cis-1.6-hardened.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-rke2-cis-1.6-permissive.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.5-rc5/templates/cis-roles.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.5-rc5/templates/configmap.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.5-rc5/templates/deployment.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.5-rc5/templates/network_policy_allow_all.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.5-rc5/templates/patch_default_serviceaccount.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.5-rc5/templates/rbac.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-cis-1.20.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-cis-1.23.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-cis-1.5.yml delete mode 100644 charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-cis-1.6.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-k3s-cis-1.20-hardened.yml delete mode 100644 charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-k3s-cis-1.20-permissive.yml delete mode 100644 charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-k3s-cis-1.23-hardened.yml delete mode 100644 charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-k3s-cis-1.23-permissive.yml delete mode 100644 charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-k3s-cis-1.6-hardened.yml delete mode 100644 charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-k3s-cis-1.6-permissive.yml delete mode 100644 charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-rke-1.20-hardened.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-rke-1.20-permissive.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-rke-1.23-hardened.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-rke-1.23-permissive.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-rke-1.5-hardened.yml delete mode 100644 charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-rke-1.5-permissive.yml delete mode 100644 charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-rke-1.6-hardened.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-rke-1.6-permissive.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-rke2-cis-1.20-hardened.yml delete mode 100644 charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-rke2-cis-1.20-permissive.yml delete mode 100644 charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-rke2-cis-1.23-hardened.yml delete mode 100644 charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-rke2-cis-1.23-permissive.yml delete mode 100644 charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-rke2-cis-1.5-hardened.yml delete mode 100644 charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-rke2-cis-1.5-permissive.yml delete mode 100644 charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-rke2-cis-1.6-hardened.yml delete mode 100644 charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-rke2-cis-1.6-permissive.yml delete mode 100644 charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofileaks.yml delete mode 100644 charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofileeks.yml delete mode 100644 charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofilegke.yml delete mode 100644 charts/rancher-cis-benchmark/2.0.5-rc5/templates/serviceaccount.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.5-rc5/templates/validate-install-crd.yaml delete mode 100644 charts/rancher-cis-benchmark/2.0.5-rc5/values.yaml diff --git a/assets/rancher-cis-benchmark-crd/rancher-cis-benchmark-crd-2.0.5-rc5.tgz b/assets/rancher-cis-benchmark-crd/rancher-cis-benchmark-crd-2.0.5-rc5.tgz deleted file mode 100644 index a873cc0b301aea4f698f422807ea8bb3182b71bf..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1466 zcmV;r1x5NFiwG0|00000|0w_~VMtOiV@ORlOnEsqVl!4SWK%V1T2nbTPgYhoO;>Dc zVQyr3R8em|NM&qo0PI@dlbbdWzGwdxn)KNO|GbXhE>7A>+gxsZ*YtTU_H5-qVx;97 zPpAKTN5Gu{gE2O?(~0-RV@Z4~!MEQ^3mPO}qV95Gx^t9#8GwH3a_zmHE$-07*B$kTSG{3>JRS}Qqw)2X+Z*@X>nr9S>UbB641vCK5B61D-2cQt zN<~0INi*p%#(}_B3x@-dkB(4pIcgG*0=)@Kxl%f8DLfD5guNjh;hWMS5&|?KaGWs9 zHWi`l`Mkwt+<2?OrYzRL0I!{7+6E=+usbGdi zMVjM#d=yf|5fC7O2Lx6>lK9CG#yDJti8eEcKc|-E)v} zYv@NB{Je_}V}>gmnCa*aV`*5%Slx75&%GGJpnkS;W|b;wAf;h}nHKQ8cx~X{X(0*q zRQXXL)0uVISEJ+|&~m~YLqL&nd@wYNq@CxTR*%BRTL==cm%EZ#N;)L%PDI6!7IIPP zz(hd+dgYKJ@N>8inU+RSAsCZGx?49i0(u0IpVBYuhDJc}Qf0H46i2=NHsu1PP-N!G3`&=_)p|;tc#2P2Q zIMsr+m5)mtq~dg9iyPob>87QSW$)-)1It65VO zNhh52-Cgj4>t?j7hN+vnHgoT1IC?#hdb**wgXpkmGwi;ct22QU!P%8VZcKKVLartSYO?fQtLEFSu^W=#2D@xRHm1Glr+g2pqd$&wen^^bT z7Uj+W`$5=bzvrIpNt8UCU9OBziu+w^k5BttSxM>Aj$Grp3n4$KHLU-wOQj78fi?C2 z{`GKNsQ(T6qtT`QcM3ap{qL19Efxabyxvl|6AjprIy()7o;%)?&(@ z1+9ABV|#4ainlhmJ9t;#nOohtL%NYQ)PIekYW!7Lo&JwUqoV$g2bb?ZPGZN_|Aa6t z%Kt0|tWy8f-T9AwM|#J9usE?FD3Kkr#+?xDxBJhxC)~#$A^xlNfA-<#{ihF3;2rFv z?)%@~uwVH8cQhPa>VGG(pSFDLdc$T(ALC2V#Ape`#Kz~ekwK5mS5=?Xo_mECyV%7p UcCj-1F8~1l|LaEukN`9Q043PnrT_o{ diff --git a/assets/rancher-cis-benchmark/rancher-cis-benchmark-2.0.5-rc5.tgz b/assets/rancher-cis-benchmark/rancher-cis-benchmark-2.0.5-rc5.tgz deleted file mode 100644 index bb3f510e46aa9acb7807b556811ea9126a389b5b..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 6162 zcmYM2c{r4B)cD61k|jixC0oe8%Q8f^tPxU~vSc^e$?_1g6Na)i;!9+!WRDSw$Wqc2 zX)H0ev2SC{-0$?hzw7!v|2@w+*E#oDuIGHtEtJN@4g2>1DcGfZCf5~QO)S*RBQ#ZA zl@msur5myW&gm&nx9Sma#p^-bdk=N7Y z%JB`hBytQ=K^s&~^X)#wv-%D2LE1dBNKVFixBI9PFeLk+9iQR_dW1{HO z>$6dK(c78Ar7}l;_-T%h#nQ`e)gwG8V$_AOmpsRrN0KGWB?{t>(?OlWIVTf$nR4qo zMn>@CmX0-1SOJNUjdnb#MovLbMA2)ZWV&rfv*}cb&&P@&Zv2N4x6>ioy6l<;mHR0d zFOa2ViFaP=_dMA1!1{I28HdL|&iclsVz+oi;;Y}|78ad{i6PBl;^aQ z{h%WH-~|2dgVU$Z6zZm|el2~TuWKufDz_gRcd}|Xtsb6v%9-cO5H;w2jko*M<=pH` z8z9B6{rb%Pu33EpNYOr+4up%#FDL_55mrmfobQ4mTJI=w+Glq7dJUC zik;-{i)Q1J3(dOIvPJ)Aw2EFju6vXh>8!;iw`eG}d+!R}cV_1@UXHj2#`GC{uQbw6 zUl|q?lC(XaugzKdK=6d&i{NvtmoM6?{74!^%^q37;x0V33wZN|X<~4dCf6jp+Fs0m ziX23z#P1xLK;X@(41D)^z|^bb&ViP3c(iPavTo*KAO@v*<`K(oiHg_0tHs~DOV8E$ zX~nY=k^<=u(EKo~88lONx(SDjerZ2G$W2$FKDg*JhtB1jkI=i8`zjoZtMoKETJ#lK z2}^8S8o7cC*(zn7d@ltHN9>eKSWl|2>u{Q|p(3sn(J=o>SCFSTNS0eQwHt;SGk65K zne{w+#Yb;f6E3QCX^?MVplEpwXKmEv9XvZ>cp!gxo+qJhLhQh?Z*EfBww0NkwyV_F z`#(n1vREHAtHb2Bk=PeW*E!#4EAR1Y;4Al;oW&lAr!y$}DceZSEWfHox2IV9JvUxd zkL5KIU3xdQ^LImY#G)m%9oPB7^bC|?El4t)|I8IW6rB*8u9z&v9VnEH3ijr=dD+_Y zdGLE}ZFWF(>&08`S;bz4(Y}i7<)VsuRz(>5`OmqJyMq1dAKW|fgojvY#t=n&Bq4bv z1S!Rq%2+7KG#ac^rN<17Zqv<6vZB><>^|+pvtv~F-IQLWzjBv};onqb=0saFoNW}| zf5Mp;kZ3EN=bvGP=mME(z9gpJ88Uq=k*S~DmJ^`HKtz+_|MkXUgi&R`4CFok;! z@c7Q>O(0~3(zPdhTZxZ3K}P1AgtJR+iFkpiXO}FmGB*>hSvT7IH%@C($>#Cc_pNLD zZd}Dylda42>o?B(v?7(;FdqB0ZK9j0LO-&+4XU69ckYYrreeR74N0}n%eWpusXAE4 z$cnhnmUVeLJSPXg(-#7V=E4g4yTXd3^0qr^8T?IMe#gq0Y_^HaEd2C(QE(r@@-G<| z6leeYy18BZA~#)eChc#aWs=WF%*>qHOyAR)Ey*!c{fElC<*Y*r5pt=PU-J#W0UEJ$+?(M3*&@VB6dqT&5y^?=k*=g(}Vh)gC;J?Ca_+Yo!3 zL;8&RO^)Uf@W08+OHJugvWwgA?mi*4Kjj6nQGVK+hqSd;bxrmw9-;}S+JMBqpnQQ) zAi>ConJwW{!ETj#@sRn@FNw}kxQ=<>8R{|^{c$6_8gxt-YUPXO& zB#VUF)$8=wH*QZITYfV6G}ecS;I#^8$<^!kM%B@NlUcprPdN2EbO)a3gkZ?TV=V8v z?DU*0r3aC8THqFo+CZ@YtaAT=B@yAj z|3Vlf5%JHJZ~7V*=IH^$h@Bq=%d$T-0Q}t!XqtI^B#5^!&96OwE72P{2ok2{^WgKLz7o728LOzu7B%rRbvoX z1eN5CFj6S+kga+GY7|{myLr>DA8*`1f=IuAA@PAoG!hWJ@9s%{1}g+GwvA!48vtBC zp&FW3Mtl_Zv;rV{h-m{D^|Ov71k0;Aut~p&A+X61FBxf4c$I+hCKN=*;P{;WN#}vo z7t93g#(X#>?N%+40^a-mU#KOnZgBF)xCuQil7pt%HfH4zgKgRXKOUVVLg{pORl7yY zxj_vYz&C!9K~t#`MMxPyvEob7y zA`>9opINcV1bP4OqX4ivO}WKttva}gdAtYijeepUm8J+aQlMn=zTf}qs{Vw|Q3ub; zA#{?2RMnf1>;wL7tgw%G@DPvRCj+Mkfs~E2qU_rkA1n~$awj7C=rq27;SFe)B%lQx zSYG`F*@CeXu&m_3WBF#9QWUvm+Up zZZ2>!*M4f~{fU7rA9UCfNhiN3Oc#e^@0B>e%l+23XhYOsX z_ysIGI@>7N^?hGz_?!ZM4~eYISQP1wM^evzz?CvR&5jALY}aGkHmezT8D$~&_t)I6 zB#TV+aYzKvRk0!Ss5q zE)!(7S;{(c=IhSub0OUy-l|!suD==7E?wGXVs7^K`F8V5`Fbck7R;B2F zdbf1_Isf`m^$HPnC6kv~VkefCrxw4qg&H96ZUR!QZ)qh01DnQ~ei#bMatq5=5;Nv9 zABN9HXuGTs?8`MxX*n;N42>3upk54U&TF01K2ee@l{vHQR5Vm!r-3p3PR{6-$}^Lh z|AE0U9$e%!l)SU^dex>NH6#QjT0Q5&jMmK%G=DX~tsDKY-8m=BhU5J_&0fA}D-(~K zR3k|u%1PC$-ag3g(Zd>4n^Aawq7t37EF-hEoZ0mR%>XCBJ26SL;AwJuJg-OCx?6``Q)gC`+7Hbi^?~&swJ?Z{^E;TvR6G!FWwA|2-qSF)7DiS z3aGhX*l|d-)gI$d50p5_mwmeUU@I^s?5P}jMsIdEk>N(;#O5<|$y?{Vmh)^}J0P`d z?Pl43-wsiPw!zs~47@GsFTSp-i!mKu0hnaL}jtsI~2P8m2qTa_Z-?!GtQGqeJ-WESG z;aI$QD!%QKM;#x&W%zW$ZRsSXY7>s)kI>awI}V|iT&*paBCgyvP1+zEqvuIW<|Nsx#x$ zQuSTPx+7aI6JAIXog^5m=lm@R&KkuVaxEDse->_ebZU5Si$`9$$a@)WSp^`_Ad$k2 zUZuzS%pd4ruI@K1GMT4uO5LPa`SapgVaVkq)ls&|DFi=jtm2kG(QUhMq?%v9zi_)^akIsx8;fRYA%t!>b3plV_zAF%gdzkf%c}|3@qhqvxop1H2B1H6PoH9>h zrKJ<&6p(er?>7E=p6@U8>*o>&(&^W;DHHkoQ@1SNG%YX=Mh#XX?8?(~m6mZ18ebVq zZ{g!sRAJ4ehfwd3=P_~@naHt5~BlN~;YMhGp7^PIz=xZPjP?`}a2Ri67!>62U%s!^xTkMDA^4Jcxi# zas!N_w4$@OQ^l z$t>ib8$qEPLzBt<&d5~~lF+pP$!drL>?h;Po^KoU>}ps;Gc9V)v6ZQS9YpNmmks!S z^9V#ZU{s?tFy!q(ggY-MRrKVr{r(}$XBT6p&;3;Wk z+#pQ=+`dm~7;ieJg54HG8uDrKg87hHsN|R?Kymy=nc6|D>I>{+9E3=O-;h3P4r1M> zW)#7)@&+_{!+ZcssRm$7q;{6(V=z6uf!S@xhXRCb)dvc@ws7GS1yYL=WX) zDtZVwS*MX3Z0V@1#>7Cx$?nk3=u?mzV7d7pgv|6E;{w#KTWG<;*ez@5*h;lQ7Mg(y zHL@i5niGWzLqxfB!aVxxOG|$ zesLmVi4In=hM{&zRWfLTV0ZC9-~EOse>-lNq)d^iJ_9N6$K;j{Sf&vTCHL0N!*OsT z=@6$QcDb-$c)sPFYk6MHUkj8UOmPpvRxip0>RAr)u8yV9S8Ij%aaOqb1GR zjY72pb|WDvwoT0Vxm~qG9HFTWAXuJLH%YyV3O6=o^iGV@jv&i93fTq9rW5Y3yRAs5 z>_MYwgLB1JXnrfbq2uuc<1a~H4`ytw7W_@@mWLNBTfPnw`7EA2(Q`?;2$}Q;M4V2^ zwRP@3^Z0fZ0nc#Hmi~Z&`SY_Ab~dQ>j~xyvl-xE{Fs-r($Q)9^c%&jO>Hp&XjW=xv zjW+)^iA|;qel}R#AYYQ3K>Lr(SRJ0rGh2zd=2oA##78LMRC+9F@y5~W z$BApqhQiO59o0f+OKb|CEOA*Y(`T{7Dg9lP3?nmzD~oWa2lQOcx5L>gOV1b8^Mx|j zJSEM)souZp(n7(szYixaek(yQYVju>V`9Qw$t~kT&!-L>c(mhc!s)xy9I#KkEW=-D z{_uQ{UHj68j7?9cLkWv~I&~9qr(sU{$;?k?z5oEGL-?By=tss0RS zr+cL%&0*waX02S-Eqdw`lP=-T~^>O%=79FWVNmbQu|&gE!L^5Mjo8B8$V4MU+u!wHCf4k!t$h zR+p$M;x*rF?}d(^(@qYlPku&Et5kL}1hemjl~2LdPy|}lTm)Jb_+S&GK4DwG`iob|TM;rJ`kCD&?k8$Z@9UrnJ0SvN8h?&)>5 zKB1AWUiS4iRZ@CJ<9A+Td3Y>~R$JM?WW_Ue=?mxmh3fS}O=U)BJ_Z_=9+W@kXUu;?vX{R9)kn9u%`A j_f!j0jC?7Kfu*uCGBRD)kCFeb|AEDYo4zm;8rc5;VBxQ3 diff --git a/charts/rancher-cis-benchmark-crd/2.0.5-rc5/Chart.yaml b/charts/rancher-cis-benchmark-crd/2.0.5-rc5/Chart.yaml deleted file mode 100644 index 4811a4763..000000000 --- a/charts/rancher-cis-benchmark-crd/2.0.5-rc5/Chart.yaml +++ /dev/null @@ -1,10 +0,0 @@ -annotations: - catalog.cattle.io/certified: rancher - catalog.cattle.io/hidden: "true" - catalog.cattle.io/namespace: cis-operator-system - catalog.cattle.io/release-name: rancher-cis-benchmark-crd -apiVersion: v1 -description: Installs the CRDs for rancher-cis-benchmark. -name: rancher-cis-benchmark-crd -type: application -version: 2.0.5-rc5 diff --git a/charts/rancher-cis-benchmark-crd/2.0.5-rc5/README.md b/charts/rancher-cis-benchmark-crd/2.0.5-rc5/README.md deleted file mode 100644 index f6d9ef621..000000000 --- a/charts/rancher-cis-benchmark-crd/2.0.5-rc5/README.md +++ /dev/null @@ -1,2 +0,0 @@ -# rancher-cis-benchmark-crd -A Rancher chart that installs the CRDs used by rancher-cis-benchmark. diff --git a/charts/rancher-cis-benchmark-crd/2.0.5-rc5/templates/clusterscan.yaml b/charts/rancher-cis-benchmark-crd/2.0.5-rc5/templates/clusterscan.yaml deleted file mode 100644 index 3cbb0ffcd..000000000 --- a/charts/rancher-cis-benchmark-crd/2.0.5-rc5/templates/clusterscan.yaml +++ /dev/null @@ -1,148 +0,0 @@ -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - name: clusterscans.cis.cattle.io -spec: - group: cis.cattle.io - names: - kind: ClusterScan - plural: clusterscans - scope: Cluster - versions: - - name: v1 - served: true - storage: true - additionalPrinterColumns: - - jsonPath: .status.lastRunScanProfileName - name: ClusterScanProfile - type: string - - jsonPath: .status.summary.total - name: Total - type: string - - jsonPath: .status.summary.pass - name: Pass - type: string - - jsonPath: .status.summary.fail - name: Fail - type: string - - jsonPath: .status.summary.skip - name: Skip - type: string - - jsonPath: .status.summary.warn - name: Warn - type: string - - jsonPath: .status.summary.notApplicable - name: Not Applicable - type: string - - jsonPath: .status.lastRunTimestamp - name: LastRunTimestamp - type: string - - jsonPath: .spec.scheduledScanConfig.cronSchedule - name: CronSchedule - type: string - subresources: - status: {} - schema: - openAPIV3Schema: - properties: - spec: - properties: - scanProfileName: - nullable: true - type: string - scheduledScanConfig: - nullable: true - properties: - cronSchedule: - nullable: true - type: string - retentionCount: - type: integer - scanAlertRule: - nullable: true - properties: - alertOnComplete: - type: boolean - alertOnFailure: - type: boolean - type: object - type: object - scoreWarning: - enum: - - pass - - fail - nullable: true - type: string - type: object - status: - properties: - NextScanAt: - nullable: true - type: string - ScanAlertingRuleName: - nullable: true - type: string - conditions: - items: - properties: - lastTransitionTime: - nullable: true - type: string - lastUpdateTime: - nullable: true - type: string - message: - nullable: true - type: string - reason: - nullable: true - type: string - status: - nullable: true - type: string - type: - nullable: true - type: string - type: object - nullable: true - type: array - display: - nullable: true - properties: - error: - type: boolean - message: - nullable: true - type: string - state: - nullable: true - type: string - transitioning: - type: boolean - type: object - lastRunScanProfileName: - nullable: true - type: string - lastRunTimestamp: - nullable: true - type: string - observedGeneration: - type: integer - summary: - nullable: true - properties: - fail: - type: integer - notApplicable: - type: integer - pass: - type: integer - skip: - type: integer - total: - type: integer - warn: - type: integer - type: object - type: object - type: object diff --git a/charts/rancher-cis-benchmark-crd/2.0.5-rc5/templates/clusterscanbenchmark.yaml b/charts/rancher-cis-benchmark-crd/2.0.5-rc5/templates/clusterscanbenchmark.yaml deleted file mode 100644 index fd291f8c3..000000000 --- a/charts/rancher-cis-benchmark-crd/2.0.5-rc5/templates/clusterscanbenchmark.yaml +++ /dev/null @@ -1,54 +0,0 @@ -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - name: clusterscanbenchmarks.cis.cattle.io -spec: - group: cis.cattle.io - names: - kind: ClusterScanBenchmark - plural: clusterscanbenchmarks - scope: Cluster - versions: - - name: v1 - served: true - storage: true - additionalPrinterColumns: - - jsonPath: .spec.clusterProvider - name: ClusterProvider - type: string - - jsonPath: .spec.minKubernetesVersion - name: MinKubernetesVersion - type: string - - jsonPath: .spec.maxKubernetesVersion - name: MaxKubernetesVersion - type: string - - jsonPath: .spec.customBenchmarkConfigMapName - name: customBenchmarkConfigMapName - type: string - - jsonPath: .spec.customBenchmarkConfigMapNamespace - name: customBenchmarkConfigMapNamespace - type: string - subresources: - status: {} - schema: - openAPIV3Schema: - properties: - spec: - properties: - clusterProvider: - nullable: true - type: string - customBenchmarkConfigMapName: - nullable: true - type: string - customBenchmarkConfigMapNamespace: - nullable: true - type: string - maxKubernetesVersion: - nullable: true - type: string - minKubernetesVersion: - nullable: true - type: string - type: object - type: object diff --git a/charts/rancher-cis-benchmark-crd/2.0.5-rc5/templates/clusterscanprofile.yaml b/charts/rancher-cis-benchmark-crd/2.0.5-rc5/templates/clusterscanprofile.yaml deleted file mode 100644 index 1e75501b7..000000000 --- a/charts/rancher-cis-benchmark-crd/2.0.5-rc5/templates/clusterscanprofile.yaml +++ /dev/null @@ -1,36 +0,0 @@ -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - name: clusterscanprofiles.cis.cattle.io -spec: - group: cis.cattle.io - names: - kind: ClusterScanProfile - plural: clusterscanprofiles - scope: Cluster - versions: - - name: v1 - served: true - storage: true - subresources: - status: {} - schema: - openAPIV3Schema: - properties: - spec: - properties: - benchmarkVersion: - nullable: true - type: string - skipTests: - items: - nullable: true - type: string - nullable: true - type: array - type: object - type: object - additionalPrinterColumns: - - jsonPath: .spec.benchmarkVersion - name: BenchmarkVersion - type: string diff --git a/charts/rancher-cis-benchmark-crd/2.0.5-rc5/templates/clusterscanreport.yaml b/charts/rancher-cis-benchmark-crd/2.0.5-rc5/templates/clusterscanreport.yaml deleted file mode 100644 index 6e8c0b7de..000000000 --- a/charts/rancher-cis-benchmark-crd/2.0.5-rc5/templates/clusterscanreport.yaml +++ /dev/null @@ -1,39 +0,0 @@ -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - name: clusterscanreports.cis.cattle.io -spec: - group: cis.cattle.io - names: - kind: ClusterScanReport - plural: clusterscanreports - scope: Cluster - versions: - - name: v1 - served: true - storage: true - additionalPrinterColumns: - - jsonPath: .spec.lastRunTimestamp - name: LastRunTimestamp - type: string - - jsonPath: .spec.benchmarkVersion - name: BenchmarkVersion - type: string - subresources: - status: {} - schema: - openAPIV3Schema: - properties: - spec: - properties: - benchmarkVersion: - nullable: true - type: string - lastRunTimestamp: - nullable: true - type: string - reportJSON: - nullable: true - type: string - type: object - type: object \ No newline at end of file diff --git a/charts/rancher-cis-benchmark/2.0.5-rc5/Chart.yaml b/charts/rancher-cis-benchmark/2.0.5-rc5/Chart.yaml deleted file mode 100644 index 3d17d59c5..000000000 --- a/charts/rancher-cis-benchmark/2.0.5-rc5/Chart.yaml +++ /dev/null @@ -1,22 +0,0 @@ -annotations: - catalog.cattle.io/auto-install: rancher-cis-benchmark-crd=match - catalog.cattle.io/certified: rancher - catalog.cattle.io/display-name: CIS Benchmark - catalog.cattle.io/kube-version: '>= 1.21.0-0 < 1.25.0-0' - catalog.cattle.io/namespace: cis-operator-system - catalog.cattle.io/os: linux - catalog.cattle.io/permits-os: linux,windows - catalog.cattle.io/provides-gvr: cis.cattle.io.clusterscans/v1 - catalog.cattle.io/rancher-version: '>= 2.6.0-0 < 2.7.0-0' - catalog.cattle.io/release-name: rancher-cis-benchmark - catalog.cattle.io/type: cluster-tool - catalog.cattle.io/ui-component: rancher-cis-benchmark -apiVersion: v1 -appVersion: v2.0.5-rc5 -description: The cis-operator enables running CIS benchmark security scans on a kubernetes - cluster -icon: https://charts.rancher.io/assets/logos/cis-kube-bench.svg -keywords: -- security -name: rancher-cis-benchmark -version: 2.0.5-rc5 diff --git a/charts/rancher-cis-benchmark/2.0.5-rc5/README.md b/charts/rancher-cis-benchmark/2.0.5-rc5/README.md deleted file mode 100644 index 50beab58b..000000000 --- a/charts/rancher-cis-benchmark/2.0.5-rc5/README.md +++ /dev/null @@ -1,9 +0,0 @@ -# Rancher CIS Benchmark Chart - -The cis-operator enables running CIS benchmark security scans on a kubernetes cluster and generate compliance reports that can be downloaded. - -# Installation - -``` -helm install rancher-cis-benchmark ./ --create-namespace -n cis-operator-system -``` diff --git a/charts/rancher-cis-benchmark/2.0.5-rc5/app-readme.md b/charts/rancher-cis-benchmark/2.0.5-rc5/app-readme.md deleted file mode 100644 index 5e495d605..000000000 --- a/charts/rancher-cis-benchmark/2.0.5-rc5/app-readme.md +++ /dev/null @@ -1,15 +0,0 @@ -# Rancher CIS Benchmarks - -This chart enables security scanning of the cluster using [CIS (Center for Internet Security) benchmarks](https://www.cisecurity.org/benchmark/kubernetes/). - -For more information on how to use the feature, refer to our [docs](https://rancher.com/docs/rancher/v2.x/en/cis-scans/v2.5/). - -This chart installs the following components: - -- [cis-operator](https://github.com/rancher/cis-operator) - The cis-operator handles launching the [kube-bench](https://github.com/aquasecurity/kube-bench) tool that runs a suite of CIS tests on the nodes of your Kubernetes cluster. After scans finish, the cis-operator generates a compliance report that can be downloaded. -- Scans - A scan is a CRD (`ClusterScan`) that defines when to trigger CIS scans on the cluster based on the defined profile. A report is created after the scan is completed. -- Profiles - A profile is a CRD (`ClusterScanProfile`) that defines the configuration for the CIS scan, which is the benchmark versions to use and any specific tests to skip in that benchmark. This chart installs a few default `ClusterScanProfile` custom resources with no skipped tests, which can immediately be used to launch CIS scans. -- Benchmark Versions - A benchmark version is a CRD (`ClusterScanBenchmark`) that defines the CIS benchmark version to run using kube-bench as well as the valid configuration parameters for that benchmark. This chart installs a few default `ClusterScanBenchmark` custom resources. -- Alerting Resources - Rancher's CIS Benchmark application lets you run a cluster scan on a schedule, and send alerts when scans finish. - - If you want to enable alerts to be delivered when a cluster scan completes, you need to ensure that [Rancher's Monitoring and Alerting](https://rancher.com/docs/rancher/v2.x/en/monitoring-alerting/v2.5/) application is pre-installed and the [Receivers and Routes](https://rancher.com/docs/rancher/v2.x/en/monitoring-alerting/v2.5/configuration/#alertmanager-config) are configured to send out alerts. - - Additionally, you need to set `alerts: true` in the Values YAML while installing or upgrading this chart. diff --git a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/_helpers.tpl b/charts/rancher-cis-benchmark/2.0.5-rc5/templates/_helpers.tpl deleted file mode 100644 index b7bb00042..000000000 --- a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/_helpers.tpl +++ /dev/null @@ -1,27 +0,0 @@ -{{/* Ensure namespace is set the same everywhere */}} -{{- define "cis.namespace" -}} - {{- .Release.Namespace | default "cis-operator-system" -}} -{{- end -}} - -{{- define "system_default_registry" -}} -{{- if .Values.global.cattle.systemDefaultRegistry -}} -{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}} -{{- else -}} -{{- "" -}} -{{- end -}} -{{- end -}} - -{{/* -Windows cluster will add default taint for linux nodes, -add below linux tolerations to workloads could be scheduled to those linux nodes -*/}} -{{- define "linux-node-tolerations" -}} -- key: "cattle.io/os" - value: "linux" - effect: "NoSchedule" - operator: "Equal" -{{- end -}} - -{{- define "linux-node-selector" -}} -kubernetes.io/os: linux -{{- end -}} diff --git a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/alertingrule.yaml b/charts/rancher-cis-benchmark/2.0.5-rc5/templates/alertingrule.yaml deleted file mode 100644 index 1787c88a0..000000000 --- a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/alertingrule.yaml +++ /dev/null @@ -1,14 +0,0 @@ -{{- if .Values.alerts.enabled -}} ---- -apiVersion: monitoring.coreos.com/v1 -kind: PodMonitor -metadata: - name: rancher-cis-pod-monitor - namespace: {{ template "cis.namespace" . }} -spec: - selector: - matchLabels: - cis.cattle.io/operator: cis-operator - podMetricsEndpoints: - - port: cismetrics -{{- end }} diff --git a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-aks-1.0.yaml b/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-aks-1.0.yaml deleted file mode 100644 index 1ac866253..000000000 --- a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-aks-1.0.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: aks-1.0 -spec: - clusterProvider: aks - minKubernetesVersion: "1.15.0" diff --git a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-cis-1.20.yaml b/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-cis-1.20.yaml deleted file mode 100644 index 898976581..000000000 --- a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-cis-1.20.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: cis-1.20 -spec: - clusterProvider: "" - minKubernetesVersion: "1.19.0" diff --git a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-cis-1.23.yaml b/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-cis-1.23.yaml deleted file mode 100644 index a4c6d1ff2..000000000 --- a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-cis-1.23.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: cis-1.23 -spec: - clusterProvider: "" - minKubernetesVersion: "1.21.0" diff --git a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-cis-1.5.yaml b/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-cis-1.5.yaml deleted file mode 100644 index 39e8b834a..000000000 --- a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-cis-1.5.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: cis-1.5 -spec: - clusterProvider: "" - minKubernetesVersion: "1.15.0" diff --git a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-cis-1.6.yaml b/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-cis-1.6.yaml deleted file mode 100644 index 93ba064f4..000000000 --- a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-cis-1.6.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: cis-1.6 -spec: - clusterProvider: "" - minKubernetesVersion: "1.16.0" diff --git a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-eks-1.0.1.yaml b/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-eks-1.0.1.yaml deleted file mode 100644 index d1ba9d295..000000000 --- a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-eks-1.0.1.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: eks-1.0.1 -spec: - clusterProvider: eks - minKubernetesVersion: "1.15.0" diff --git a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-gke-1.0.yaml b/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-gke-1.0.yaml deleted file mode 100644 index 72122e8c5..000000000 --- a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-gke-1.0.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: gke-1.0 -spec: - clusterProvider: gke - minKubernetesVersion: "1.15.0" diff --git a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-k3s-cis-1.20-hardened.yaml b/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-k3s-cis-1.20-hardened.yaml deleted file mode 100644 index 872bb9b3b..000000000 --- a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-k3s-cis-1.20-hardened.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: k3s-cis-1.20-hardened -spec: - clusterProvider: k3s - minKubernetesVersion: "1.19.0" diff --git a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-k3s-cis-1.20-permissive.yaml b/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-k3s-cis-1.20-permissive.yaml deleted file mode 100644 index 58ec00f23..000000000 --- a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-k3s-cis-1.20-permissive.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: k3s-cis-1.20-permissive -spec: - clusterProvider: k3s - minKubernetesVersion: "1.19.0" diff --git a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-k3s-cis-1.23-hardened.yaml b/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-k3s-cis-1.23-hardened.yaml deleted file mode 100644 index bd6ce6188..000000000 --- a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-k3s-cis-1.23-hardened.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: k3s-cis-1.23-hardened -spec: - clusterProvider: k3s - minKubernetesVersion: "1.21.0" diff --git a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-k3s-cis-1.23-permissive.yaml b/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-k3s-cis-1.23-permissive.yaml deleted file mode 100644 index dd6dee3bb..000000000 --- a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-k3s-cis-1.23-permissive.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: k3s-cis-1.23-permissive -spec: - clusterProvider: k3s - minKubernetesVersion: "1.21.0" diff --git a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-k3s-cis-1.6-hardened.yaml b/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-k3s-cis-1.6-hardened.yaml deleted file mode 100644 index 3ca9b6009..000000000 --- a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-k3s-cis-1.6-hardened.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: k3s-cis-1.6-hardened -spec: - clusterProvider: k3s - minKubernetesVersion: "1.20.5" diff --git a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-k3s-cis-1.6-permissive.yaml b/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-k3s-cis-1.6-permissive.yaml deleted file mode 100644 index 6d4253c6e..000000000 --- a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-k3s-cis-1.6-permissive.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: k3s-cis-1.6-permissive -spec: - clusterProvider: k3s - minKubernetesVersion: "1.20.5" diff --git a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-rke-cis-1.20-hardened.yaml b/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-rke-cis-1.20-hardened.yaml deleted file mode 100644 index 0555922ad..000000000 --- a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-rke-cis-1.20-hardened.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke-cis-1.20-hardened -spec: - clusterProvider: rke - minKubernetesVersion: "1.19.0" diff --git a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-rke-cis-1.20-permissive.yaml b/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-rke-cis-1.20-permissive.yaml deleted file mode 100644 index d09e9e1ed..000000000 --- a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-rke-cis-1.20-permissive.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke-cis-1.20-permissive -spec: - clusterProvider: rke - minKubernetesVersion: "1.19.0" diff --git a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-rke-cis-1.23-hardened.yaml b/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-rke-cis-1.23-hardened.yaml deleted file mode 100644 index bc6ad77a6..000000000 --- a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-rke-cis-1.23-hardened.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke-cis-1.23-hardened -spec: - clusterProvider: rke - minKubernetesVersion: "1.21.0" diff --git a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-rke-cis-1.23-permissive.yaml b/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-rke-cis-1.23-permissive.yaml deleted file mode 100644 index f63b45590..000000000 --- a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-rke-cis-1.23-permissive.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke-cis-1.23-permissive -spec: - clusterProvider: rke - minKubernetesVersion: "1.21.0" diff --git a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-rke-cis-1.5-hardened.yaml b/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-rke-cis-1.5-hardened.yaml deleted file mode 100644 index b5627f966..000000000 --- a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-rke-cis-1.5-hardened.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke-cis-1.5-hardened -spec: - clusterProvider: rke - minKubernetesVersion: "1.15.0" diff --git a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-rke-cis-1.5-permissive.yaml b/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-rke-cis-1.5-permissive.yaml deleted file mode 100644 index 95f80c0f0..000000000 --- a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-rke-cis-1.5-permissive.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke-cis-1.5-permissive -spec: - clusterProvider: rke - minKubernetesVersion: "1.15.0" diff --git a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-rke-cis-1.6-hardened.yaml b/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-rke-cis-1.6-hardened.yaml deleted file mode 100644 index d75de8154..000000000 --- a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-rke-cis-1.6-hardened.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke-cis-1.6-hardened -spec: - clusterProvider: rke - minKubernetesVersion: "1.16.0" diff --git a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-rke-cis-1.6-permissive.yaml b/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-rke-cis-1.6-permissive.yaml deleted file mode 100644 index 52428f4a7..000000000 --- a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-rke-cis-1.6-permissive.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke-cis-1.6-permissive -spec: - clusterProvider: rke - minKubernetesVersion: "1.16.0" diff --git a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-rke2-cis-1.20-hardened.yaml b/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-rke2-cis-1.20-hardened.yaml deleted file mode 100644 index 95375fbea..000000000 --- a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-rke2-cis-1.20-hardened.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke2-cis-1.20-hardened -spec: - clusterProvider: rke2 - minKubernetesVersion: "1.19.0" diff --git a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-rke2-cis-1.20-permissive.yaml b/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-rke2-cis-1.20-permissive.yaml deleted file mode 100644 index 51da408b9..000000000 --- a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-rke2-cis-1.20-permissive.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke2-cis-1.20-permissive -spec: - clusterProvider: rke2 - minKubernetesVersion: "1.19.0" diff --git a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-rke2-cis-1.23-hardened.yaml b/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-rke2-cis-1.23-hardened.yaml deleted file mode 100644 index 1e2cb2a3a..000000000 --- a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-rke2-cis-1.23-hardened.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke2-cis-1.23-hardened -spec: - clusterProvider: rke2 - minKubernetesVersion: "1.21.0" diff --git a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-rke2-cis-1.23-permissive.yaml b/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-rke2-cis-1.23-permissive.yaml deleted file mode 100644 index eef970c0e..000000000 --- a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-rke2-cis-1.23-permissive.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke2-cis-1.23-permissive -spec: - clusterProvider: rke2 - minKubernetesVersion: "1.21.0" diff --git a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-rke2-cis-1.5-hardened.yaml b/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-rke2-cis-1.5-hardened.yaml deleted file mode 100644 index 3d83e9bd8..000000000 --- a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-rke2-cis-1.5-hardened.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke2-cis-1.5-hardened -spec: - clusterProvider: rke2 - minKubernetesVersion: "1.18.0" diff --git a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-rke2-cis-1.5-permissive.yaml b/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-rke2-cis-1.5-permissive.yaml deleted file mode 100644 index f66aa8f6e..000000000 --- a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-rke2-cis-1.5-permissive.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke2-cis-1.5-permissive -spec: - clusterProvider: rke2 - minKubernetesVersion: "1.18.0" diff --git a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-rke2-cis-1.6-hardened.yaml b/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-rke2-cis-1.6-hardened.yaml deleted file mode 100644 index 3593bf371..000000000 --- a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-rke2-cis-1.6-hardened.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke2-cis-1.6-hardened -spec: - clusterProvider: rke2 - minKubernetesVersion: "1.20.5" diff --git a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-rke2-cis-1.6-permissive.yaml b/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-rke2-cis-1.6-permissive.yaml deleted file mode 100644 index 522f846ae..000000000 --- a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/benchmark-rke2-cis-1.6-permissive.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke2-cis-1.6-permissive -spec: - clusterProvider: rke2 - minKubernetesVersion: "1.20.5" diff --git a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/cis-roles.yaml b/charts/rancher-cis-benchmark/2.0.5-rc5/templates/cis-roles.yaml deleted file mode 100644 index 23c93dc65..000000000 --- a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/cis-roles.yaml +++ /dev/null @@ -1,49 +0,0 @@ ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - name: cis-admin -rules: - - apiGroups: - - cis.cattle.io - resources: - - clusterscanbenchmarks - - clusterscanprofiles - - clusterscans - - clusterscanreports - verbs: ["create", "update", "delete", "patch","get", "watch", "list"] - - apiGroups: - - catalog.cattle.io - resources: ["apps"] - resourceNames: ["rancher-cis-benchmark"] - verbs: ["get", "watch", "list"] - - apiGroups: - - "" - resources: - - configmaps - verbs: - - '*' ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - name: cis-view -rules: - - apiGroups: - - cis.cattle.io - resources: - - clusterscanbenchmarks - - clusterscanprofiles - - clusterscans - - clusterscanreports - verbs: ["get", "watch", "list"] - - apiGroups: - - catalog.cattle.io - resources: ["apps"] - resourceNames: ["rancher-cis-benchmark"] - verbs: ["get", "watch", "list"] - - apiGroups: - - "" - resources: - - configmaps - verbs: ["get", "watch", "list"] diff --git a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/configmap.yaml b/charts/rancher-cis-benchmark/2.0.5-rc5/templates/configmap.yaml deleted file mode 100644 index 1a9cd1809..000000000 --- a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/configmap.yaml +++ /dev/null @@ -1,18 +0,0 @@ -kind: ConfigMap -apiVersion: v1 -metadata: - name: default-clusterscanprofiles - namespace: {{ template "cis.namespace" . }} -data: - # Default ClusterScanProfiles per cluster provider type - rke: |- - <1.21.0: rke-profile-permissive-1.20 - >=1.21.0: rke-profile-permissive-1.23 - rke2: |- - <1.21.0: rke2-cis-1.20-profile-permissive - >=1.21.0: rke2-cis-1.23-profile-permissive - eks: "eks-profile" - gke: "gke-profile" - aks: "aks-profile" - k3s: "k3s-cis-1.23-profile-permissive" - default: "cis-1.23-profile" diff --git a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/deployment.yaml b/charts/rancher-cis-benchmark/2.0.5-rc5/templates/deployment.yaml deleted file mode 100644 index ab0bb3e24..000000000 --- a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/deployment.yaml +++ /dev/null @@ -1,55 +0,0 @@ -apiVersion: apps/v1 -kind: Deployment -metadata: - name: cis-operator - namespace: {{ template "cis.namespace" . }} - labels: - cis.cattle.io/operator: cis-operator -spec: - selector: - matchLabels: - cis.cattle.io/operator: cis-operator - template: - metadata: - labels: - cis.cattle.io/operator: cis-operator - spec: - serviceAccountName: cis-operator-serviceaccount - containers: - - name: cis-operator - image: '{{ template "system_default_registry" . }}{{ .Values.image.cisoperator.repository }}:{{ .Values.image.cisoperator.tag }}' - imagePullPolicy: Always - ports: - - name: cismetrics - containerPort: {{ .Values.alerts.metricsPort }} - env: - - name: SECURITY_SCAN_IMAGE - value: {{ template "system_default_registry" . }}{{ .Values.image.securityScan.repository }} - - name: SECURITY_SCAN_IMAGE_TAG - value: {{ .Values.image.securityScan.tag }} - - name: SONOBUOY_IMAGE - value: {{ template "system_default_registry" . }}{{ .Values.image.sonobuoy.repository }} - - name: SONOBUOY_IMAGE_TAG - value: {{ .Values.image.sonobuoy.tag }} - - name: CIS_ALERTS_METRICS_PORT - value: '{{ .Values.alerts.metricsPort }}' - - name: CIS_ALERTS_SEVERITY - value: {{ .Values.alerts.severity }} - - name: CIS_ALERTS_ENABLED - value: {{ .Values.alerts.enabled | default "false" | quote }} - - name: CLUSTER_NAME - value: '{{ .Values.global.cattle.clusterName }}' - resources: - {{- toYaml .Values.resources | nindent 12 }} - nodeSelector: {{ include "linux-node-selector" . | nindent 8 }} -{{- if .Values.nodeSelector }} -{{ toYaml .Values.nodeSelector | indent 8 }} -{{- end }} - tolerations: {{ include "linux-node-tolerations" . | nindent 8 }} -{{- if .Values.tolerations }} -{{ toYaml .Values.tolerations | indent 8 }} -{{- end }} - {{- with .Values.affinity }} - affinity: - {{- toYaml . | nindent 8 }} - {{- end }} diff --git a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/network_policy_allow_all.yaml b/charts/rancher-cis-benchmark/2.0.5-rc5/templates/network_policy_allow_all.yaml deleted file mode 100644 index 6ed5d645e..000000000 --- a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/network_policy_allow_all.yaml +++ /dev/null @@ -1,15 +0,0 @@ ---- -apiVersion: networking.k8s.io/v1 -kind: NetworkPolicy -metadata: - name: default-allow-all - namespace: {{ template "cis.namespace" . }} -spec: - podSelector: {} - ingress: - - {} - egress: - - {} - policyTypes: - - Ingress - - Egress diff --git a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/patch_default_serviceaccount.yaml b/charts/rancher-cis-benchmark/2.0.5-rc5/templates/patch_default_serviceaccount.yaml deleted file mode 100644 index e78a6bd08..000000000 --- a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/patch_default_serviceaccount.yaml +++ /dev/null @@ -1,29 +0,0 @@ ---- -apiVersion: batch/v1 -kind: Job -metadata: - name: patch-sa - annotations: - "helm.sh/hook": post-install, post-upgrade - "helm.sh/hook-delete-policy": hook-succeeded, before-hook-creation -spec: - template: - spec: - serviceAccountName: cis-operator-serviceaccount - nodeSelector: {{ include "linux-node-selector" . | nindent 8 }} -{{- if .Values.nodeSelector }} -{{ toYaml .Values.nodeSelector | indent 8 }} -{{- end }} - tolerations: {{ include "linux-node-tolerations" . | nindent 8 }} -{{- if .Values.tolerations }} -{{ toYaml .Values.tolerations | indent 8 }} -{{- end }} - restartPolicy: Never - containers: - - name: sa - image: "{{ template "system_default_registry" . }}{{ .Values.global.kubectl.repository }}:{{ .Values.global.kubectl.tag }}" - imagePullPolicy: {{ .Values.global.imagePullPolicy }} - command: ["kubectl", "patch", "serviceaccount", "default", "-p", "{\"automountServiceAccountToken\": false}"] - args: ["-n", {{ template "cis.namespace" . }}] - - backoffLimit: 1 diff --git a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/rbac.yaml b/charts/rancher-cis-benchmark/2.0.5-rc5/templates/rbac.yaml deleted file mode 100644 index 4ff88ea5f..000000000 --- a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/rbac.yaml +++ /dev/null @@ -1,43 +0,0 @@ -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - labels: - app.kubernetes.io/name: rancher-cis-benchmark - app.kubernetes.io/instance: release-name - name: cis-operator-role -rules: -- apiGroups: - - '*' - resources: - - '*' - verbs: - - '*' ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - labels: - app.kubernetes.io/name: rancher-cis-benchmark - app.kubernetes.io/instance: release-name - name: cis-operator-rolebinding -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: cis-operator-role -subjects: -- kind: ServiceAccount - name: cis-serviceaccount - namespace: {{ template "cis.namespace" . }} ---- -kind: ClusterRoleBinding -apiVersion: rbac.authorization.k8s.io/v1 -metadata: - name: cis-operator-installer -subjects: -- kind: ServiceAccount - name: cis-operator-serviceaccount - namespace: {{ template "cis.namespace" . }} -roleRef: - kind: ClusterRole - name: cluster-admin - apiGroup: rbac.authorization.k8s.io \ No newline at end of file diff --git a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-cis-1.20.yaml b/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-cis-1.20.yaml deleted file mode 100644 index 05263ce7d..000000000 --- a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-cis-1.20.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: cis-1.20-profile - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: cis-1.20 diff --git a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-cis-1.23.yaml b/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-cis-1.23.yaml deleted file mode 100644 index c59d8f51f..000000000 --- a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-cis-1.23.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: cis-1.23-profile - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: cis-1.23 diff --git a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-cis-1.5.yml b/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-cis-1.5.yml deleted file mode 100644 index d69ae9dd5..000000000 --- a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-cis-1.5.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: cis-1.5-profile - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: cis-1.5 diff --git a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-cis-1.6.yaml b/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-cis-1.6.yaml deleted file mode 100644 index 8a8d8bf88..000000000 --- a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-cis-1.6.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: cis-1.6-profile - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: cis-1.6 diff --git a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-k3s-cis-1.20-hardened.yml b/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-k3s-cis-1.20-hardened.yml deleted file mode 100644 index a0b6cb6f6..000000000 --- a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-k3s-cis-1.20-hardened.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: k3s-cis-1.20-profile-hardened - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: k3s-cis-1.20-hardened diff --git a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-k3s-cis-1.20-permissive.yml b/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-k3s-cis-1.20-permissive.yml deleted file mode 100644 index 89885548d..000000000 --- a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-k3s-cis-1.20-permissive.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: k3s-cis-1.20-profile-permissive - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: k3s-cis-1.20-permissive diff --git a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-k3s-cis-1.23-hardened.yml b/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-k3s-cis-1.23-hardened.yml deleted file mode 100644 index 724412d3a..000000000 --- a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-k3s-cis-1.23-hardened.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: k3s-cis-1.23-profile-hardened - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: k3s-cis-1.23-hardened diff --git a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-k3s-cis-1.23-permissive.yml b/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-k3s-cis-1.23-permissive.yml deleted file mode 100644 index 9f9213de1..000000000 --- a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-k3s-cis-1.23-permissive.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: k3s-cis-1.23-profile-permissive - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: k3s-cis-1.23-permissive diff --git a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-k3s-cis-1.6-hardened.yml b/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-k3s-cis-1.6-hardened.yml deleted file mode 100644 index 095e977ab..000000000 --- a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-k3s-cis-1.6-hardened.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: k3s-cis-1.6-profile-hardened - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: k3s-cis-1.6-hardened diff --git a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-k3s-cis-1.6-permissive.yml b/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-k3s-cis-1.6-permissive.yml deleted file mode 100644 index 3b22a80c8..000000000 --- a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-k3s-cis-1.6-permissive.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: k3s-cis-1.6-profile-permissive - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: k3s-cis-1.6-permissive diff --git a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-rke-1.20-hardened.yaml b/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-rke-1.20-hardened.yaml deleted file mode 100644 index c36cf38c9..000000000 --- a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-rke-1.20-hardened.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: rke-profile-hardened-1.20 - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: rke-cis-1.20-hardened diff --git a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-rke-1.20-permissive.yaml b/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-rke-1.20-permissive.yaml deleted file mode 100644 index cfeb4b34c..000000000 --- a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-rke-1.20-permissive.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: rke-profile-permissive-1.20 - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: rke-cis-1.20-permissive diff --git a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-rke-1.23-hardened.yaml b/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-rke-1.23-hardened.yaml deleted file mode 100644 index 007331149..000000000 --- a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-rke-1.23-hardened.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: rke-profile-hardened-1.23 - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: rke-cis-1.23-hardened diff --git a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-rke-1.23-permissive.yaml b/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-rke-1.23-permissive.yaml deleted file mode 100644 index 085b60dfa..000000000 --- a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-rke-1.23-permissive.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: rke-profile-permissive-1.23 - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: rke-cis-1.23-permissive diff --git a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-rke-1.5-hardened.yml b/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-rke-1.5-hardened.yml deleted file mode 100644 index 4eabe158a..000000000 --- a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-rke-1.5-hardened.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: rke-profile-hardened-1.5 - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: rke-cis-1.5-hardened \ No newline at end of file diff --git a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-rke-1.5-permissive.yml b/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-rke-1.5-permissive.yml deleted file mode 100644 index 1f78751d1..000000000 --- a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-rke-1.5-permissive.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: rke-profile-permissive-1.5 - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: rke-cis-1.5-permissive diff --git a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-rke-1.6-hardened.yaml b/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-rke-1.6-hardened.yaml deleted file mode 100644 index d38febd80..000000000 --- a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-rke-1.6-hardened.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: rke-profile-hardened-1.6 - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: rke-cis-1.6-hardened diff --git a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-rke-1.6-permissive.yaml b/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-rke-1.6-permissive.yaml deleted file mode 100644 index d31b5b0d2..000000000 --- a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-rke-1.6-permissive.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: rke-profile-permissive-1.6 - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: rke-cis-1.6-permissive diff --git a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-rke2-cis-1.20-hardened.yml b/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-rke2-cis-1.20-hardened.yml deleted file mode 100644 index decc9b651..000000000 --- a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-rke2-cis-1.20-hardened.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: rke2-cis-1.20-profile-hardened - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: rke2-cis-1.20-hardened diff --git a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-rke2-cis-1.20-permissive.yml b/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-rke2-cis-1.20-permissive.yml deleted file mode 100644 index 74c96ffc4..000000000 --- a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-rke2-cis-1.20-permissive.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: rke2-cis-1.20-profile-permissive - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: rke2-cis-1.20-permissive diff --git a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-rke2-cis-1.23-hardened.yml b/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-rke2-cis-1.23-hardened.yml deleted file mode 100644 index abc1c2a21..000000000 --- a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-rke2-cis-1.23-hardened.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: rke2-cis-1.23-profile-hardened - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: rke2-cis-1.23-hardened diff --git a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-rke2-cis-1.23-permissive.yml b/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-rke2-cis-1.23-permissive.yml deleted file mode 100644 index 51cc519ac..000000000 --- a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-rke2-cis-1.23-permissive.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: rke2-cis-1.23-profile-permissive - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: rke2-cis-1.23-permissive diff --git a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-rke2-cis-1.5-hardened.yml b/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-rke2-cis-1.5-hardened.yml deleted file mode 100644 index 83eb3131e..000000000 --- a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-rke2-cis-1.5-hardened.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: rke2-cis-1.5-profile-hardened - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: rke2-cis-1.5-hardened diff --git a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-rke2-cis-1.5-permissive.yml b/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-rke2-cis-1.5-permissive.yml deleted file mode 100644 index 40dc44bdf..000000000 --- a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-rke2-cis-1.5-permissive.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: rke2-cis-1.5-profile-permissive - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: rke2-cis-1.5-permissive diff --git a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-rke2-cis-1.6-hardened.yml b/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-rke2-cis-1.6-hardened.yml deleted file mode 100644 index c7ac7f949..000000000 --- a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-rke2-cis-1.6-hardened.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: rke2-cis-1.6-profile-hardened - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: rke2-cis-1.6-hardened diff --git a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-rke2-cis-1.6-permissive.yml b/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-rke2-cis-1.6-permissive.yml deleted file mode 100644 index 96ca1345a..000000000 --- a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofile-rke2-cis-1.6-permissive.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: rke2-cis-1.6-profile-permissive - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: rke2-cis-1.6-permissive diff --git a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofileaks.yml b/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofileaks.yml deleted file mode 100644 index ea7b25b40..000000000 --- a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofileaks.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: aks-profile - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: aks-1.0 \ No newline at end of file diff --git a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofileeks.yml b/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofileeks.yml deleted file mode 100644 index 3b4e34437..000000000 --- a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofileeks.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: eks-profile - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: eks-1.0.1 \ No newline at end of file diff --git a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofilegke.yml b/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofilegke.yml deleted file mode 100644 index 2ddd0686f..000000000 --- a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/scanprofilegke.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: gke-profile - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: gke-1.0 \ No newline at end of file diff --git a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/serviceaccount.yaml b/charts/rancher-cis-benchmark/2.0.5-rc5/templates/serviceaccount.yaml deleted file mode 100644 index ec48ec622..000000000 --- a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/serviceaccount.yaml +++ /dev/null @@ -1,14 +0,0 @@ -apiVersion: v1 -kind: ServiceAccount -metadata: - namespace: {{ template "cis.namespace" . }} - name: cis-operator-serviceaccount ---- -apiVersion: v1 -kind: ServiceAccount -metadata: - namespace: {{ template "cis.namespace" . }} - labels: - app.kubernetes.io/name: rancher-cis-benchmark - app.kubernetes.io/instance: release-name - name: cis-serviceaccount diff --git a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/validate-install-crd.yaml b/charts/rancher-cis-benchmark/2.0.5-rc5/templates/validate-install-crd.yaml deleted file mode 100644 index 562295791..000000000 --- a/charts/rancher-cis-benchmark/2.0.5-rc5/templates/validate-install-crd.yaml +++ /dev/null @@ -1,17 +0,0 @@ -#{{- if gt (len (lookup "rbac.authorization.k8s.io/v1" "ClusterRole" "" "")) 0 -}} -# {{- $found := dict -}} -# {{- set $found "cis.cattle.io/v1/ClusterScan" false -}} -# {{- set $found "cis.cattle.io/v1/ClusterScanBenchmark" false -}} -# {{- set $found "cis.cattle.io/v1/ClusterScanProfile" false -}} -# {{- set $found "cis.cattle.io/v1/ClusterScanReport" false -}} -# {{- range .Capabilities.APIVersions -}} -# {{- if hasKey $found (toString .) -}} -# {{- set $found (toString .) true -}} -# {{- end -}} -# {{- end -}} -# {{- range $_, $exists := $found -}} -# {{- if (eq $exists false) -}} -# {{- required "Required CRDs are missing. Please install the corresponding CRD chart before installing this chart." "" -}} -# {{- end -}} -# {{- end -}} -#{{- end -}} \ No newline at end of file diff --git a/charts/rancher-cis-benchmark/2.0.5-rc5/values.yaml b/charts/rancher-cis-benchmark/2.0.5-rc5/values.yaml deleted file mode 100644 index 56122b85b..000000000 --- a/charts/rancher-cis-benchmark/2.0.5-rc5/values.yaml +++ /dev/null @@ -1,49 +0,0 @@ -# Default values for rancher-cis-benchmark. -# This is a YAML-formatted file. -# Declare variables to be passed into your templates. - -image: - cisoperator: - repository: rancher/cis-operator - tag: v1.0.9 - securityScan: - repository: rancher/security-scan - tag: v0.2.8-rc4 - sonobuoy: - repository: rancher/mirrored-sonobuoy-sonobuoy - tag: v0.56.7 - -resources: {} - # We usually recommend not to specify default resources and to leave this as a conscious - # choice for the user. This also increases chances charts run on environments with little - # resources, such as Minikube. If you do want to specify resources, uncomment the following - # lines, adjust them as necessary, and remove the curly braces after 'resources:'. - # limits: - # cpu: 100m - # memory: 128Mi - # requests: - # cpu: 100m - # memory: 128Mi - -## Node labels for pod assignment -## Ref: https://kubernetes.io/docs/user-guide/node-selection/ -## -nodeSelector: {} - -## List of node taints to tolerate (requires Kubernetes >= 1.6) -tolerations: [] - -affinity: {} - -global: - cattle: - systemDefaultRegistry: "" - clusterName: "" - kubectl: - repository: rancher/kubectl - tag: v1.20.2 - -alerts: - enabled: false - severity: warning - metricsPort: 8080 diff --git a/index.yaml b/index.yaml index 50f51b9af..5378fd0b8 100755 --- a/index.yaml +++ b/index.yaml @@ -2749,32 +2749,6 @@ entries: - assets/rancher-backup-crd/rancher-backup-crd-1.0.200.tgz version: 1.0.200 rancher-cis-benchmark: - - annotations: - catalog.cattle.io/auto-install: rancher-cis-benchmark-crd=match - catalog.cattle.io/certified: rancher - catalog.cattle.io/display-name: CIS Benchmark - catalog.cattle.io/kube-version: '>= 1.21.0-0 < 1.25.0-0' - catalog.cattle.io/namespace: cis-operator-system - catalog.cattle.io/os: linux - catalog.cattle.io/permits-os: linux,windows - catalog.cattle.io/provides-gvr: cis.cattle.io.clusterscans/v1 - catalog.cattle.io/rancher-version: '>= 2.6.0-0 < 2.7.0-0' - catalog.cattle.io/release-name: rancher-cis-benchmark - catalog.cattle.io/type: cluster-tool - catalog.cattle.io/ui-component: rancher-cis-benchmark - apiVersion: v1 - appVersion: v2.0.5-rc5 - created: "2022-07-22T12:15:11.420059706+05:30" - description: The cis-operator enables running CIS benchmark security scans on - a kubernetes cluster - digest: c1c9c6d81ee615d04d06b0f4ee8d686afc3e9260dcedd5bce47c400db986f0e2 - icon: https://charts.rancher.io/assets/logos/cis-kube-bench.svg - keywords: - - security - name: rancher-cis-benchmark - urls: - - assets/rancher-cis-benchmark/rancher-cis-benchmark-2.0.5-rc5.tgz - version: 2.0.5-rc5 - annotations: catalog.cattle.io/auto-install: rancher-cis-benchmark-crd=match catalog.cattle.io/certified: rancher @@ -3063,20 +3037,6 @@ entries: - assets/rancher-cis-benchmark/rancher-cis-benchmark-1.0.100.tgz version: 1.0.100 rancher-cis-benchmark-crd: - - annotations: - catalog.cattle.io/certified: rancher - catalog.cattle.io/hidden: "true" - catalog.cattle.io/namespace: cis-operator-system - catalog.cattle.io/release-name: rancher-cis-benchmark-crd - apiVersion: v1 - created: "2022-07-22T12:15:11.423654684+05:30" - description: Installs the CRDs for rancher-cis-benchmark. - digest: 19bafcc07f2ab1bb0fdfebd34a1881b4db299ff16b8db8ef49c24b2bbd29ced3 - name: rancher-cis-benchmark-crd - type: application - urls: - - assets/rancher-cis-benchmark-crd/rancher-cis-benchmark-crd-2.0.5-rc5.tgz - version: 2.0.5-rc5 - annotations: catalog.cattle.io/certified: rancher catalog.cattle.io/hidden: "true"