From f19d9c425e2a3c58c1c09db93d3eedab45a29b47 Mon Sep 17 00:00:00 2001 From: galal-hussein Date: Wed, 12 Oct 2022 20:04:38 +0200 Subject: [PATCH] make remove --- .../rancher-cis-benchmark-crd-3.0.0-rc3.tgz | Bin 1467 -> 0 bytes .../rancher-cis-benchmark-3.0.0-rc3.tgz | Bin 6080 -> 0 bytes .../3.0.0-rc3/Chart.yaml | 10 -- .../3.0.0-rc3/README.md | 2 - .../3.0.0-rc3/templates/clusterscan.yaml | 148 ------------------ .../templates/clusterscanbenchmark.yaml | 54 ------- .../templates/clusterscanprofile.yaml | 36 ----- .../templates/clusterscanreport.yaml | 39 ----- .../3.0.0-rc3/Chart.yaml | 22 --- .../rancher-cis-benchmark/3.0.0-rc3/README.md | 9 -- .../3.0.0-rc3/app-readme.md | 15 -- .../3.0.0-rc3/templates/_helpers.tpl | 27 ---- .../3.0.0-rc3/templates/alertingrule.yaml | 14 -- .../templates/benchmark-aks-1.0.yaml | 8 - .../templates/benchmark-cis-1.20.yaml | 9 -- .../templates/benchmark-cis-1.23.yaml | 8 - .../templates/benchmark-cis-1.5.yaml | 9 -- .../templates/benchmark-cis-1.6.yaml | 9 -- .../templates/benchmark-eks-1.0.1.yaml | 8 - .../templates/benchmark-gke-1.0.yaml | 8 - .../benchmark-k3s-cis-1.20-hardened.yaml | 9 -- .../benchmark-k3s-cis-1.20-permissive.yaml | 9 -- .../benchmark-k3s-cis-1.23-hardened.yaml | 8 - .../benchmark-k3s-cis-1.23-permissive.yaml | 8 - .../benchmark-k3s-cis-1.6-hardened.yaml | 9 -- .../benchmark-k3s-cis-1.6-permissive.yaml | 9 -- .../benchmark-rke-cis-1.20-hardened.yaml | 9 -- .../benchmark-rke-cis-1.20-permissive.yaml | 9 -- .../benchmark-rke-cis-1.23-hardened.yaml | 8 - .../benchmark-rke-cis-1.23-permissive.yaml | 8 - .../benchmark-rke-cis-1.5-hardened.yaml | 9 -- .../benchmark-rke-cis-1.5-permissive.yaml | 9 -- .../benchmark-rke-cis-1.6-hardened.yaml | 9 -- .../benchmark-rke-cis-1.6-permissive.yaml | 9 -- .../benchmark-rke2-cis-1.20-hardened.yaml | 9 -- .../benchmark-rke2-cis-1.20-permissive.yaml | 9 -- .../benchmark-rke2-cis-1.23-hardened.yaml | 8 - .../benchmark-rke2-cis-1.23-permissive.yaml | 8 - .../benchmark-rke2-cis-1.5-hardened.yaml | 9 -- .../benchmark-rke2-cis-1.5-permissive.yaml | 9 -- .../benchmark-rke2-cis-1.6-hardened.yaml | 9 -- .../benchmark-rke2-cis-1.6-permissive.yaml | 9 -- .../3.0.0-rc3/templates/cis-roles.yaml | 49 ------ .../3.0.0-rc3/templates/configmap.yaml | 18 --- .../3.0.0-rc3/templates/deployment.yaml | 55 ------- .../templates/network_policy_allow_all.yaml | 15 -- .../patch_default_serviceaccount.yaml | 29 ---- .../3.0.0-rc3/templates/rbac.yaml | 43 ----- .../templates/scanprofile-cis-1.20.yaml | 9 -- .../templates/scanprofile-cis-1.23.yaml | 9 -- .../templates/scanprofile-cis-1.6.yaml | 9 -- .../scanprofile-k3s-cis-1.20-hardened.yml | 9 -- .../scanprofile-k3s-cis-1.20-permissive.yml | 9 -- .../scanprofile-k3s-cis-1.23-hardened.yml | 9 -- .../scanprofile-k3s-cis-1.23-permissive.yml | 9 -- .../scanprofile-k3s-cis-1.6-hardened.yml | 9 -- .../scanprofile-k3s-cis-1.6-permissive.yml | 9 -- .../scanprofile-rke-1.20-hardened.yaml | 9 -- .../scanprofile-rke-1.20-permissive.yaml | 9 -- .../scanprofile-rke-1.23-hardened.yaml | 9 -- .../scanprofile-rke-1.23-permissive.yaml | 9 -- .../scanprofile-rke-1.6-hardened.yaml | 9 -- .../scanprofile-rke-1.6-permissive.yaml | 9 -- .../scanprofile-rke2-cis-1.20-hardened.yml | 9 -- .../scanprofile-rke2-cis-1.20-permissive.yml | 9 -- .../scanprofile-rke2-cis-1.23-hardened.yml | 9 -- .../scanprofile-rke2-cis-1.23-permissive.yml | 9 -- .../scanprofile-rke2-cis-1.6-hardened.yml | 9 -- .../scanprofile-rke2-cis-1.6-permissive.yml | 9 -- .../3.0.0-rc3/templates/scanprofileaks.yml | 9 -- .../3.0.0-rc3/templates/scanprofileeks.yml | 9 -- .../3.0.0-rc3/templates/scanprofilegke.yml | 9 -- .../3.0.0-rc3/templates/serviceaccount.yaml | 14 -- .../templates/validate-install-crd.yaml | 17 -- .../3.0.0-rc3/values.yaml | 49 ------ index.yaml | 40 ----- 76 files changed, 1172 deletions(-) delete mode 100644 assets/rancher-cis-benchmark-crd/rancher-cis-benchmark-crd-3.0.0-rc3.tgz delete mode 100644 assets/rancher-cis-benchmark/rancher-cis-benchmark-3.0.0-rc3.tgz delete mode 100644 charts/rancher-cis-benchmark-crd/3.0.0-rc3/Chart.yaml delete mode 100644 charts/rancher-cis-benchmark-crd/3.0.0-rc3/README.md delete mode 100644 charts/rancher-cis-benchmark-crd/3.0.0-rc3/templates/clusterscan.yaml delete mode 100644 charts/rancher-cis-benchmark-crd/3.0.0-rc3/templates/clusterscanbenchmark.yaml delete mode 100644 charts/rancher-cis-benchmark-crd/3.0.0-rc3/templates/clusterscanprofile.yaml delete mode 100644 charts/rancher-cis-benchmark-crd/3.0.0-rc3/templates/clusterscanreport.yaml delete mode 100644 charts/rancher-cis-benchmark/3.0.0-rc3/Chart.yaml delete mode 100644 charts/rancher-cis-benchmark/3.0.0-rc3/README.md delete mode 100644 charts/rancher-cis-benchmark/3.0.0-rc3/app-readme.md delete mode 100644 charts/rancher-cis-benchmark/3.0.0-rc3/templates/_helpers.tpl delete mode 100644 charts/rancher-cis-benchmark/3.0.0-rc3/templates/alertingrule.yaml delete mode 100644 charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-aks-1.0.yaml delete mode 100644 charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-cis-1.20.yaml delete mode 100644 charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-cis-1.23.yaml delete mode 100644 charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-cis-1.5.yaml delete mode 100644 charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-cis-1.6.yaml delete mode 100644 charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-eks-1.0.1.yaml delete mode 100644 charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-gke-1.0.yaml delete mode 100644 charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-k3s-cis-1.20-hardened.yaml delete mode 100644 charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-k3s-cis-1.20-permissive.yaml delete mode 100644 charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-k3s-cis-1.23-hardened.yaml delete mode 100644 charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-k3s-cis-1.23-permissive.yaml delete mode 100644 charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-k3s-cis-1.6-hardened.yaml delete mode 100644 charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-k3s-cis-1.6-permissive.yaml delete mode 100644 charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-rke-cis-1.20-hardened.yaml delete mode 100644 charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-rke-cis-1.20-permissive.yaml delete mode 100644 charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-rke-cis-1.23-hardened.yaml delete mode 100644 charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-rke-cis-1.23-permissive.yaml delete mode 100644 charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-rke-cis-1.5-hardened.yaml delete mode 100644 charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-rke-cis-1.5-permissive.yaml delete mode 100644 charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-rke-cis-1.6-hardened.yaml delete mode 100644 charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-rke-cis-1.6-permissive.yaml delete mode 100644 charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-rke2-cis-1.20-hardened.yaml delete mode 100644 charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-rke2-cis-1.20-permissive.yaml delete mode 100644 charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-rke2-cis-1.23-hardened.yaml delete mode 100644 charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-rke2-cis-1.23-permissive.yaml delete mode 100644 charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-rke2-cis-1.5-hardened.yaml delete mode 100644 charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-rke2-cis-1.5-permissive.yaml delete mode 100644 charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-rke2-cis-1.6-hardened.yaml delete mode 100644 charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-rke2-cis-1.6-permissive.yaml delete mode 100644 charts/rancher-cis-benchmark/3.0.0-rc3/templates/cis-roles.yaml delete mode 100644 charts/rancher-cis-benchmark/3.0.0-rc3/templates/configmap.yaml delete mode 100644 charts/rancher-cis-benchmark/3.0.0-rc3/templates/deployment.yaml delete mode 100644 charts/rancher-cis-benchmark/3.0.0-rc3/templates/network_policy_allow_all.yaml delete mode 100644 charts/rancher-cis-benchmark/3.0.0-rc3/templates/patch_default_serviceaccount.yaml delete mode 100644 charts/rancher-cis-benchmark/3.0.0-rc3/templates/rbac.yaml delete mode 100644 charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-cis-1.20.yaml delete mode 100644 charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-cis-1.23.yaml delete mode 100644 charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-cis-1.6.yaml delete mode 100644 charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-k3s-cis-1.20-hardened.yml delete mode 100644 charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-k3s-cis-1.20-permissive.yml delete mode 100644 charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-k3s-cis-1.23-hardened.yml delete mode 100644 charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-k3s-cis-1.23-permissive.yml delete mode 100644 charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-k3s-cis-1.6-hardened.yml delete mode 100644 charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-k3s-cis-1.6-permissive.yml delete mode 100644 charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-rke-1.20-hardened.yaml delete mode 100644 charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-rke-1.20-permissive.yaml delete mode 100644 charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-rke-1.23-hardened.yaml delete mode 100644 charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-rke-1.23-permissive.yaml delete mode 100644 charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-rke-1.6-hardened.yaml delete mode 100644 charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-rke-1.6-permissive.yaml delete mode 100644 charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-rke2-cis-1.20-hardened.yml delete mode 100644 charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-rke2-cis-1.20-permissive.yml delete mode 100644 charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-rke2-cis-1.23-hardened.yml delete mode 100644 charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-rke2-cis-1.23-permissive.yml delete mode 100644 charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-rke2-cis-1.6-hardened.yml delete mode 100644 charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-rke2-cis-1.6-permissive.yml delete mode 100644 charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofileaks.yml delete mode 100644 charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofileeks.yml delete mode 100644 charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofilegke.yml delete mode 100644 charts/rancher-cis-benchmark/3.0.0-rc3/templates/serviceaccount.yaml delete mode 100644 charts/rancher-cis-benchmark/3.0.0-rc3/templates/validate-install-crd.yaml delete mode 100644 charts/rancher-cis-benchmark/3.0.0-rc3/values.yaml diff --git a/assets/rancher-cis-benchmark-crd/rancher-cis-benchmark-crd-3.0.0-rc3.tgz b/assets/rancher-cis-benchmark-crd/rancher-cis-benchmark-crd-3.0.0-rc3.tgz deleted file mode 100644 index fc0cc58f5755cc4d18391000e3d3efbd391642e0..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1467 zcmV;s1w{HEiwG0|00000|0w_~VMtOiV@ORlOnEsqVl!4SWK%V1T2nbTPgYhoO;>Dc zVQyr3R8em|NM&qo0PI@dbE7s8&a?jt&Gp$F_(#(5Th4dwT-(cKob>v<78_d^kQix6 z&(rDu-Vu-(Fc@QF=Q`(o@mLbyO7QKs(t-xbm#F((nEo6kUxuI``&|2Pr%TY}tRM_7 z4m8(w-OJG^`E^~l{OgVfqYG~|^hV>s;Bq*=aJ@_SYIwoiLmls8u_4eG?!mswi~FA# zNT~=&C}}1=#yAiJYTW;VLVSQeHERzI88lb1jk)K6B7q%Oll}17QmGd{=Ty$%bUzsi+vzLN00@ zm^chUuN+bYK>_zZ*U}0q0%HnDx9f&hKo1~_Q~G7y&G|(l*T#)~LSU7<8Iy4k*awk|;=FAvE)TtN-&(`hPuyDmDOB}0!Z)nInnprtHEXJ3 zN!4Cb2rFodL?p{*Z}N43nr4Sgbo;%q2G+-CIaOg4Ak}zUPk63WfFQSnS;>j@L0IVs zHUEm7Y6w)>X}Hp81xCmU=Aewj&DK84sc*hHr=@G#m)tdz&VqQy(7VBJWJBY+f>rxR z-Q6?Sgj`s%qu2t@P4bmjYR-^0qwnLmWhIH!h&&UVDZr=S3>VO8q$g^2=Kb)4N$Yo)g(oO;dO%DKaH zqGiI-!0AN?DrKKFE`Q52u0Bn4DUannXqVV(o*uD&MTt78l5C=H+lpj+?~Z9|6YGB4 zqQV(qKM0%b_uP{`ii(G`%azGValcFL@oAqcYbjmXQD}VaLdXwlE$e^lQfZ4qU_LPfCD zw?nBX6!Q0Yj#?t2$(~;U`BVLXUEtwc1AP5}9pHJwq?f0dmRvqTv{5nLVc>!8lJ`+N z`^=C2uB&Aw(sg>S-g19Va5suyAAF{b>ng65oG}7)hU_<`*#)Dxg z{|~N)SLghH3OjcG&j{0D_RqgNtH}M&4!h6%-;=<yKcu{}0y~KTLjPbN zP2c}|qe1EW-|=X0uK%6He%kV}>ouFDeT*+b6Qd;%6C0n?#s+;hU)6n5``Rl!+u6=` VwzE~)e*pjh|Nkfl&sG35008!o+?4nkt&RL1P4or&zL z$0qV}24-e*dXF3(Y@O|VO^uLBTF)Jw$kqe#DOkBL&X9momxQnWZ++Qv%LlnedL-v(dk=hV~GWG_Fq!?Fh~xtWO8xRAyl zHzu)!`?_-^Xug+GT^`_4oA$K+5pB2`BN_Z-pCXYyw@yBIEC0=9 zJ|zv?96fA+@iRmsR1Z0#-(E_IiK=c!=Zt&Jx3aKwHwwqNUFo?_mMG4)m5FD4PvLQu zkfi1MM!H;!C9a^R=(oOdF*q>ythw?jI% zyoafB{W((HpT6ThhnnkrZ@OutcwEO4 zH${ITjt(6u&S|PGM(_Eh_{Yiv3;xGj{%b`ZFAh8Y*pPnghiXZ1{1Vai+Vqdu9?_T- z55RrZ>Yw$-{6=_$kh4W=U+0puw^gjC^K|NJa_3l4wXKO#5I}_ITrxTBOihB`EfZTO zgl!ukd6yRFhNYrCD#rAtL+1p(N~+#oQ59O@r*WS%S0yq%lK!fPez@>Xf@&~0cvB*@ z;NFOUE6?N6kzXr15pL6~K93i*VSS%gkBkdba)XB&*Z(rSW3p#+TOw6>zWI2WtChbY zM{;=l{#cgm+pEPQ|Ec0X{RU%?x=uhI6>GlE)YCg^i%OQf$jv|FR)1RZw#PsXx>0laNjUvk7lL)0UDSIV;Vf+Ru0IW4=*c8g<+W zk?ykX5+SGKvQ^>GX&5V{m%jfjuuRvY3PnM~&{P}~`%vS9zBSi7m6#uO!mcgO2DKk> zp>c^Y0o&8d?+f@VCEN;|opGevd9mO>aR$PzQ&P`WBjzXq#Tc`!9HaOXren<>FNd38RGP;N38OcS-K$f} z6$2^Ts7A57&G9)FYJuxFH;Y7WsTg3}_3?eF8LghrHeGBLk~oiJbj}6Pom>*X=lS|7 zQw(*M2+fd(e3=R@YUmf`;`R8vh7`kYQrIE9;jx{<`?wDeC4)G(XldDc49{`b3VEfn zeRYkOkw~w4QS)1QeKtALk1z8>zJ*Ti8V|9poZoNis>ySQo2#ibnNxZ2)1=@T4%&5>VIhWxny4sM%qGUqYAVr*!fMfwkfpLG52 zX;5!Hb>-zdEWGevMbg{XWUlX`i|qQ3FnND2d;b~^TVG69;Q^;u2!WYs*o6<+WY1)$ z^_i1|y-b}IJH~5wT8R25THQZ8F}{2TKJ@G=%p>BKiR!h*SfvJ-N6QA_a0q0*lLHjO zc`^hm$#jn4yw1C*n{@{m)|?FRO7M3z*^ls_K@hOmMPPSuF_e4$n@BU&92U)8lp!VX z-T-p}cE>m>hk1}M0Zs#7gY2$PM8WZSkmyAMv8_ue_OdYWt$!J1{uJ`R{~9ugeRd3Y zhyj$}!4*SlpqYLQmskX_3{cuNPwcUSs=e#Ziys0_ED=ty1ph-}afX8Y=O9^-{u$8P zyN)gp>g5XHYkzf&-b*H}qh|`9gO%`a$0%6RZ{A=Tu@22hNOdYd4uoym#DXxRiA~@@ zRl0<-J*&gGd7k-{!b>*a%k&S%cV1h^57k?e?*<{OLGIz{0STjFC;}z|I~{_DIMa{d zcPdE)^r81UiZH!{p&ji8?WI^$3$Hm`Vh0o-U{I|}5S+lgeu5AwO9o;!z>IP&n0^aN3=MIKvv@_$L+j-@th+K&PK zcc9_&7~(oeChc)u{uttQP<@6JHM0xCs%F3ljl&;si79xDEHO@ph_rz~M-`9_ojOAG z5>d3L8|w&CSubc_0n|z@XWWhU0`^JNNAfj|3lK9N4Fvbsi71h>Sn!RV0c>D{_ltPJ zYcx0;fOs}QA}HmCEEx@9AGRc;dUfU9La0H`V2gZ@&MNgCTRY_UdN1) zc`k}Whaa8D#8<$<32yG`%R>MQP2I)hCo1-WRx9AIYq|t(38=^eDX(R)afr!M%_YKr zQr7U!u^PpLp0mtFuz8l*5d>OzMtcAyj7+gNs0Dfi`>+Gj{_#s9RqwV(kRVNwvQ$v| zKZ0X*h;TQ`w(VV1*l@%di!=_4AcT)hzzf4vMOK8 zI)Mm`%=9xD2S}>=ZP3O@#$1c50%P$p#A+ObJw)-U#uMSuqz2x6>$GhIj!RL+Vt)(g z1|9m}J-}f3rnXTclgpTQEJK%*v)om|cYbJNHc%wiqg|HSWr$U%6Ja>cW)$3~+ALa( zVppWAP4&&yQ-8Kem!`-juuR#dt({m?;oe_ZS}6wOx20#n+YhzUU`TYmec9g7b0Yf`dHM&^?yMV|I)yUU(#!{U#a28%ct6nH zt~JQ4cSzJFgRtmkH)wOU%6YKFh za*i1}fRQRgG>PEpO$5#u4qU(5O)+T6{SlvsnAc9?}n$JQne;N zU)JP7vS+dsYRTRT?`tFcX>V&o)eurGOg? zJ%LMSh~P36{WV)HNVQJ<&TQYUx^4ZE#QMj1t10#Nc!ss?&T!G}ON8?$%gb*bd8Z7M zr$+K+cTdv1>@h$+Nn1q;ehaSV>^1eIG%N%IF9_F3DCN3SIG?ID?lo}VXh5Osi2@C| zZ^WY(7PRV_S0CB*-9R0YZ6=CF88%<}j5o@R@!S{JH16u6Qx4*XbDJjf1Q3rrWWzmzpj5 zW6+}$W@OOOrXZYXs>vh2m>N~x-`|iNc0V?wf7Ybp%#J%tA*`%0Elq)e`aln0<3;cAFsVT7jQ4s^v&hLIx}s)`p+`V`P=hhlrcb! zQ}xPqdTI=1(GSg%{0YQLlB*!nSiO?|K_-`)^1ZwHk|zVhL%F7@c!37a-S~{c)Z!7z zrvDm`w!I?d?h%==pOcR9KduVAWYmyP_212)H_7|@WNu-4i89SjA7^eXi||fdP5T_5 zmodxJ;DxonTZ(7VmQX*y`~c6&GM-G&L~2yyQiSFnkie~3o7EFs0)TN(lE8qC|2^0% zWdDo1>`ll8%})_1n-^_+tR#?}V7sOqF+H@(Jd=1en>MX)y{0J)3tNDWoiCK6_DU_@ zSw4|y4Onl6_>H9Y0l1q%6&q-reI7gXCH;~2gi!-qG%E)&5@Dn&`Q{=C*N z3ZXdHbZ*mUu2b#|oK-pA%Q?9E9u~K9{{CWNRToYW(~&8pym{Vxp-WEein~9KS;-WiNa@=T8`s*k852t(W?>y~3C`ePtmYXVY1{7Uf{>56gs(&lR)v4vz zyUW{NghE{Y@eCkxQuEnS!^iQrwq7yOwr<6?g)71xJ zqX2dEC|fN?$|E>C9y(3HT{?Z_&+sB{>y`!8?b(8NnVt%7>W6eTHijxW+roXk0~7+) zxlH2=?DhT#GCn`RNp3wtoXChfC#%H8|d|Ja#20QB(Q+XX{v}_`GS|RZ~ z<&QQ3v1n>9TA527GeI%wgeP5)D(b@wo0M!W`ectgh^!@`J%1b-!hX*B!5fzZtiNk1 zJ>=-Q;D{0P)unZ3+*e`mJWSE^qLy8yBub5drhSs*?^APsLj_P<3u?V>4^gnN#Y2?X zU6})xtC;JBFMS$YoH}Q8-PndzjN~G}u(5ur9kv>m-?fPM_Ehw`7}QtR22|OJ1S|m# z3*|k6zs&e&XAIi5&y-(@U-C>157GWbAs5f2d1MzgDo)bOAfdyb9ig#yS%7T46a_qM zb|L!)^9k$7mEK(F6mU-J!+f0J{GZHsf_9N95K<4`6iEa87jQr<)iAsZ1iwMd6(l&v*b!Wz znP53(QDK z$(E3x6`{Crgqog5KHR`4fdbaswt#xz6K;?s7=7knIv`637W!fxRm9si1w>pFL82mY zNeDs?0meapFH$w@Z5yB&pZqWW%vQmF5g(a@y96f5Gd@HPFxreZmB8pu3Lr^Hk)`dR zyh+ut&jcVB%D#)4!~SL5AQRurF{4h)R{+d7a>GGz@f5!H_^ji}F>aD6IB;fUEtuLc z9rXN1X4nNGCjWT=Dk&nok)YKuteF~LhBBK2S ztpw^>M>|0`f=pc57y9)2a98s=G;s>yeg=Uep3yz^j{ zr$BsutW$|#&@b;}avto-%AT)JxQY3f{-a4JB1``f%79{xJz}+8JVA_U_7Ghd4!*X# z)O3L$)V~|CB`Sa3rDV<`m?7_64o>}2ouGnRDdWa;-)*Otc+?R3K3C4!|Ipw^<~LN< zPSo*Dh%;cVe3~*^B5-o{Ku$p(UUU(Sd~|8q`xU(EhOn#K2l~eDB>H+j1dH5#7erE$ z?n{*m>Z{hRfti2dne^JFH^p`cjXER#B}egWX#;J6dEuvUON%L*!rZbPMLTE~;aUZG z_@760;L1#m8!Uz0MKp)DCM2V-PHE^V%b$dQ%(j()4g{z^1 zvqXHJ(4<|0Y09sP&kaNy_PL^88Ip7d%Hsr^OR(vjQiqG5$`33G%>e>o6$DQDt&YUB zi+-G4IbTfC(_bV-bSuI49TbCuE)s9?D z`Na9-K9zNMvyk#}!~S z?4rX9M3Ro^6(g9$=YelEMiyZCtS1Q=SeO#=ZPrP7`G6Ki6?q?}9M9-;Z(S?f$ER9d z$v;FFm*qw-wSVFMIaqY?%In-qs35sV5^0P2_DxTk1@zcmo8EbjTe($gC=AV*;eji8 z?4X0mIjBF&NUMCkbIvn`z4w1fPXa`o%+S3_l4n(V0_Sq{o` z?k+Z()I+qpp6*nlPiJ#J{|3Yc{gba%h3`5ecKWJWwXZeQGM)0Dt@A3})jLI5l2{*> zVa;I0_cqpDU&Qn@CK|&nR{e;l2@c-#ZXYa_#(_zHSq{3(N)!=ldW`S%+5^`6gtmBA zeA|0%va*EgnJ#47|FpJxvOgi2}@e6j>hcuifsQjOGd7S(>{>58c~>Aw!NC>r~OTWX(u64#UjV;N?Sysvc65s11pSIWAd96J+eUlQeM#v*rPj8HN}!lK+f#v(AJ-zh5ua+m^0b zlL3pp!kF2;=fQL6uzYLO6iQ8QYZS&+ z(;sHZd}!o3T$3z$=o%i0uw&y->D2ciX;>N27W6K6)KS>9z9Jn?{4KbVc)Ov>w|I-2 zz7|G`XBzW;DsY2FL}sHl)BemmD=>0Rq`ndrC@=0GdC{~N_+cqY$lS@SLhT%;Goc{7mhWz_*W5^ Ee;x3Wf&c&j diff --git a/charts/rancher-cis-benchmark-crd/3.0.0-rc3/Chart.yaml b/charts/rancher-cis-benchmark-crd/3.0.0-rc3/Chart.yaml deleted file mode 100644 index 7a136bb62..000000000 --- a/charts/rancher-cis-benchmark-crd/3.0.0-rc3/Chart.yaml +++ /dev/null @@ -1,10 +0,0 @@ -annotations: - catalog.cattle.io/certified: rancher - catalog.cattle.io/hidden: "true" - catalog.cattle.io/namespace: cis-operator-system - catalog.cattle.io/release-name: rancher-cis-benchmark-crd -apiVersion: v1 -description: Installs the CRDs for rancher-cis-benchmark. -name: rancher-cis-benchmark-crd -type: application -version: 3.0.0-rc3 diff --git a/charts/rancher-cis-benchmark-crd/3.0.0-rc3/README.md b/charts/rancher-cis-benchmark-crd/3.0.0-rc3/README.md deleted file mode 100644 index f6d9ef621..000000000 --- a/charts/rancher-cis-benchmark-crd/3.0.0-rc3/README.md +++ /dev/null @@ -1,2 +0,0 @@ -# rancher-cis-benchmark-crd -A Rancher chart that installs the CRDs used by rancher-cis-benchmark. diff --git a/charts/rancher-cis-benchmark-crd/3.0.0-rc3/templates/clusterscan.yaml b/charts/rancher-cis-benchmark-crd/3.0.0-rc3/templates/clusterscan.yaml deleted file mode 100644 index 3cbb0ffcd..000000000 --- a/charts/rancher-cis-benchmark-crd/3.0.0-rc3/templates/clusterscan.yaml +++ /dev/null @@ -1,148 +0,0 @@ -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - name: clusterscans.cis.cattle.io -spec: - group: cis.cattle.io - names: - kind: ClusterScan - plural: clusterscans - scope: Cluster - versions: - - name: v1 - served: true - storage: true - additionalPrinterColumns: - - jsonPath: .status.lastRunScanProfileName - name: ClusterScanProfile - type: string - - jsonPath: .status.summary.total - name: Total - type: string - - jsonPath: .status.summary.pass - name: Pass - type: string - - jsonPath: .status.summary.fail - name: Fail - type: string - - jsonPath: .status.summary.skip - name: Skip - type: string - - jsonPath: .status.summary.warn - name: Warn - type: string - - jsonPath: .status.summary.notApplicable - name: Not Applicable - type: string - - jsonPath: .status.lastRunTimestamp - name: LastRunTimestamp - type: string - - jsonPath: .spec.scheduledScanConfig.cronSchedule - name: CronSchedule - type: string - subresources: - status: {} - schema: - openAPIV3Schema: - properties: - spec: - properties: - scanProfileName: - nullable: true - type: string - scheduledScanConfig: - nullable: true - properties: - cronSchedule: - nullable: true - type: string - retentionCount: - type: integer - scanAlertRule: - nullable: true - properties: - alertOnComplete: - type: boolean - alertOnFailure: - type: boolean - type: object - type: object - scoreWarning: - enum: - - pass - - fail - nullable: true - type: string - type: object - status: - properties: - NextScanAt: - nullable: true - type: string - ScanAlertingRuleName: - nullable: true - type: string - conditions: - items: - properties: - lastTransitionTime: - nullable: true - type: string - lastUpdateTime: - nullable: true - type: string - message: - nullable: true - type: string - reason: - nullable: true - type: string - status: - nullable: true - type: string - type: - nullable: true - type: string - type: object - nullable: true - type: array - display: - nullable: true - properties: - error: - type: boolean - message: - nullable: true - type: string - state: - nullable: true - type: string - transitioning: - type: boolean - type: object - lastRunScanProfileName: - nullable: true - type: string - lastRunTimestamp: - nullable: true - type: string - observedGeneration: - type: integer - summary: - nullable: true - properties: - fail: - type: integer - notApplicable: - type: integer - pass: - type: integer - skip: - type: integer - total: - type: integer - warn: - type: integer - type: object - type: object - type: object diff --git a/charts/rancher-cis-benchmark-crd/3.0.0-rc3/templates/clusterscanbenchmark.yaml b/charts/rancher-cis-benchmark-crd/3.0.0-rc3/templates/clusterscanbenchmark.yaml deleted file mode 100644 index fd291f8c3..000000000 --- a/charts/rancher-cis-benchmark-crd/3.0.0-rc3/templates/clusterscanbenchmark.yaml +++ /dev/null @@ -1,54 +0,0 @@ -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - name: clusterscanbenchmarks.cis.cattle.io -spec: - group: cis.cattle.io - names: - kind: ClusterScanBenchmark - plural: clusterscanbenchmarks - scope: Cluster - versions: - - name: v1 - served: true - storage: true - additionalPrinterColumns: - - jsonPath: .spec.clusterProvider - name: ClusterProvider - type: string - - jsonPath: .spec.minKubernetesVersion - name: MinKubernetesVersion - type: string - - jsonPath: .spec.maxKubernetesVersion - name: MaxKubernetesVersion - type: string - - jsonPath: .spec.customBenchmarkConfigMapName - name: customBenchmarkConfigMapName - type: string - - jsonPath: .spec.customBenchmarkConfigMapNamespace - name: customBenchmarkConfigMapNamespace - type: string - subresources: - status: {} - schema: - openAPIV3Schema: - properties: - spec: - properties: - clusterProvider: - nullable: true - type: string - customBenchmarkConfigMapName: - nullable: true - type: string - customBenchmarkConfigMapNamespace: - nullable: true - type: string - maxKubernetesVersion: - nullable: true - type: string - minKubernetesVersion: - nullable: true - type: string - type: object - type: object diff --git a/charts/rancher-cis-benchmark-crd/3.0.0-rc3/templates/clusterscanprofile.yaml b/charts/rancher-cis-benchmark-crd/3.0.0-rc3/templates/clusterscanprofile.yaml deleted file mode 100644 index 1e75501b7..000000000 --- a/charts/rancher-cis-benchmark-crd/3.0.0-rc3/templates/clusterscanprofile.yaml +++ /dev/null @@ -1,36 +0,0 @@ -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - name: clusterscanprofiles.cis.cattle.io -spec: - group: cis.cattle.io - names: - kind: ClusterScanProfile - plural: clusterscanprofiles - scope: Cluster - versions: - - name: v1 - served: true - storage: true - subresources: - status: {} - schema: - openAPIV3Schema: - properties: - spec: - properties: - benchmarkVersion: - nullable: true - type: string - skipTests: - items: - nullable: true - type: string - nullable: true - type: array - type: object - type: object - additionalPrinterColumns: - - jsonPath: .spec.benchmarkVersion - name: BenchmarkVersion - type: string diff --git a/charts/rancher-cis-benchmark-crd/3.0.0-rc3/templates/clusterscanreport.yaml b/charts/rancher-cis-benchmark-crd/3.0.0-rc3/templates/clusterscanreport.yaml deleted file mode 100644 index 6e8c0b7de..000000000 --- a/charts/rancher-cis-benchmark-crd/3.0.0-rc3/templates/clusterscanreport.yaml +++ /dev/null @@ -1,39 +0,0 @@ -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - name: clusterscanreports.cis.cattle.io -spec: - group: cis.cattle.io - names: - kind: ClusterScanReport - plural: clusterscanreports - scope: Cluster - versions: - - name: v1 - served: true - storage: true - additionalPrinterColumns: - - jsonPath: .spec.lastRunTimestamp - name: LastRunTimestamp - type: string - - jsonPath: .spec.benchmarkVersion - name: BenchmarkVersion - type: string - subresources: - status: {} - schema: - openAPIV3Schema: - properties: - spec: - properties: - benchmarkVersion: - nullable: true - type: string - lastRunTimestamp: - nullable: true - type: string - reportJSON: - nullable: true - type: string - type: object - type: object \ No newline at end of file diff --git a/charts/rancher-cis-benchmark/3.0.0-rc3/Chart.yaml b/charts/rancher-cis-benchmark/3.0.0-rc3/Chart.yaml deleted file mode 100644 index 33de0992a..000000000 --- a/charts/rancher-cis-benchmark/3.0.0-rc3/Chart.yaml +++ /dev/null @@ -1,22 +0,0 @@ -annotations: - catalog.cattle.io/auto-install: rancher-cis-benchmark-crd=match - catalog.cattle.io/certified: rancher - catalog.cattle.io/display-name: CIS Benchmark - catalog.cattle.io/kube-version: '>= 1.21.0-0 < 1.25.0-0' - catalog.cattle.io/namespace: cis-operator-system - catalog.cattle.io/os: linux - catalog.cattle.io/permits-os: linux,windows - catalog.cattle.io/provides-gvr: cis.cattle.io.clusterscans/v1 - catalog.cattle.io/rancher-version: '>= 2.7.0-0 < 2.8.0-0' - catalog.cattle.io/release-name: rancher-cis-benchmark - catalog.cattle.io/type: cluster-tool - catalog.cattle.io/ui-component: rancher-cis-benchmark -apiVersion: v1 -appVersion: v3.0.0 -description: The cis-operator enables running CIS benchmark security scans on a kubernetes - cluster -icon: https://charts.rancher.io/assets/logos/cis-kube-bench.svg -keywords: -- security -name: rancher-cis-benchmark -version: 3.0.0-rc3 diff --git a/charts/rancher-cis-benchmark/3.0.0-rc3/README.md b/charts/rancher-cis-benchmark/3.0.0-rc3/README.md deleted file mode 100644 index 50beab58b..000000000 --- a/charts/rancher-cis-benchmark/3.0.0-rc3/README.md +++ /dev/null @@ -1,9 +0,0 @@ -# Rancher CIS Benchmark Chart - -The cis-operator enables running CIS benchmark security scans on a kubernetes cluster and generate compliance reports that can be downloaded. - -# Installation - -``` -helm install rancher-cis-benchmark ./ --create-namespace -n cis-operator-system -``` diff --git a/charts/rancher-cis-benchmark/3.0.0-rc3/app-readme.md b/charts/rancher-cis-benchmark/3.0.0-rc3/app-readme.md deleted file mode 100644 index 5e495d605..000000000 --- a/charts/rancher-cis-benchmark/3.0.0-rc3/app-readme.md +++ /dev/null @@ -1,15 +0,0 @@ -# Rancher CIS Benchmarks - -This chart enables security scanning of the cluster using [CIS (Center for Internet Security) benchmarks](https://www.cisecurity.org/benchmark/kubernetes/). - -For more information on how to use the feature, refer to our [docs](https://rancher.com/docs/rancher/v2.x/en/cis-scans/v2.5/). - -This chart installs the following components: - -- [cis-operator](https://github.com/rancher/cis-operator) - The cis-operator handles launching the [kube-bench](https://github.com/aquasecurity/kube-bench) tool that runs a suite of CIS tests on the nodes of your Kubernetes cluster. After scans finish, the cis-operator generates a compliance report that can be downloaded. -- Scans - A scan is a CRD (`ClusterScan`) that defines when to trigger CIS scans on the cluster based on the defined profile. A report is created after the scan is completed. -- Profiles - A profile is a CRD (`ClusterScanProfile`) that defines the configuration for the CIS scan, which is the benchmark versions to use and any specific tests to skip in that benchmark. This chart installs a few default `ClusterScanProfile` custom resources with no skipped tests, which can immediately be used to launch CIS scans. -- Benchmark Versions - A benchmark version is a CRD (`ClusterScanBenchmark`) that defines the CIS benchmark version to run using kube-bench as well as the valid configuration parameters for that benchmark. This chart installs a few default `ClusterScanBenchmark` custom resources. -- Alerting Resources - Rancher's CIS Benchmark application lets you run a cluster scan on a schedule, and send alerts when scans finish. - - If you want to enable alerts to be delivered when a cluster scan completes, you need to ensure that [Rancher's Monitoring and Alerting](https://rancher.com/docs/rancher/v2.x/en/monitoring-alerting/v2.5/) application is pre-installed and the [Receivers and Routes](https://rancher.com/docs/rancher/v2.x/en/monitoring-alerting/v2.5/configuration/#alertmanager-config) are configured to send out alerts. - - Additionally, you need to set `alerts: true` in the Values YAML while installing or upgrading this chart. diff --git a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/_helpers.tpl b/charts/rancher-cis-benchmark/3.0.0-rc3/templates/_helpers.tpl deleted file mode 100644 index b7bb00042..000000000 --- a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/_helpers.tpl +++ /dev/null @@ -1,27 +0,0 @@ -{{/* Ensure namespace is set the same everywhere */}} -{{- define "cis.namespace" -}} - {{- .Release.Namespace | default "cis-operator-system" -}} -{{- end -}} - -{{- define "system_default_registry" -}} -{{- if .Values.global.cattle.systemDefaultRegistry -}} -{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}} -{{- else -}} -{{- "" -}} -{{- end -}} -{{- end -}} - -{{/* -Windows cluster will add default taint for linux nodes, -add below linux tolerations to workloads could be scheduled to those linux nodes -*/}} -{{- define "linux-node-tolerations" -}} -- key: "cattle.io/os" - value: "linux" - effect: "NoSchedule" - operator: "Equal" -{{- end -}} - -{{- define "linux-node-selector" -}} -kubernetes.io/os: linux -{{- end -}} diff --git a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/alertingrule.yaml b/charts/rancher-cis-benchmark/3.0.0-rc3/templates/alertingrule.yaml deleted file mode 100644 index 1787c88a0..000000000 --- a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/alertingrule.yaml +++ /dev/null @@ -1,14 +0,0 @@ -{{- if .Values.alerts.enabled -}} ---- -apiVersion: monitoring.coreos.com/v1 -kind: PodMonitor -metadata: - name: rancher-cis-pod-monitor - namespace: {{ template "cis.namespace" . }} -spec: - selector: - matchLabels: - cis.cattle.io/operator: cis-operator - podMetricsEndpoints: - - port: cismetrics -{{- end }} diff --git a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-aks-1.0.yaml b/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-aks-1.0.yaml deleted file mode 100644 index 1ac866253..000000000 --- a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-aks-1.0.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: aks-1.0 -spec: - clusterProvider: aks - minKubernetesVersion: "1.15.0" diff --git a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-cis-1.20.yaml b/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-cis-1.20.yaml deleted file mode 100644 index 1203e5bcc..000000000 --- a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-cis-1.20.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: cis-1.20 -spec: - clusterProvider: "" - minKubernetesVersion: "1.19.0" - maxKubernetesVersion: "1.21.x" diff --git a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-cis-1.23.yaml b/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-cis-1.23.yaml deleted file mode 100644 index 920b556ea..000000000 --- a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-cis-1.23.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: cis-1.23 -spec: - clusterProvider: "" - minKubernetesVersion: "1.22.0" diff --git a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-cis-1.5.yaml b/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-cis-1.5.yaml deleted file mode 100644 index c9e6075fb..000000000 --- a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-cis-1.5.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: cis-1.5 -spec: - clusterProvider: "" - minKubernetesVersion: "1.15.0" - maxKubernetesVersion: "1.15.x" diff --git a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-cis-1.6.yaml b/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-cis-1.6.yaml deleted file mode 100644 index 4f5d66e92..000000000 --- a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-cis-1.6.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: cis-1.6 -spec: - clusterProvider: "" - minKubernetesVersion: "1.16.0" - maxKubernetesVersion: "1.18.x" diff --git a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-eks-1.0.1.yaml b/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-eks-1.0.1.yaml deleted file mode 100644 index d1ba9d295..000000000 --- a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-eks-1.0.1.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: eks-1.0.1 -spec: - clusterProvider: eks - minKubernetesVersion: "1.15.0" diff --git a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-gke-1.0.yaml b/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-gke-1.0.yaml deleted file mode 100644 index 72122e8c5..000000000 --- a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-gke-1.0.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: gke-1.0 -spec: - clusterProvider: gke - minKubernetesVersion: "1.15.0" diff --git a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-k3s-cis-1.20-hardened.yaml b/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-k3s-cis-1.20-hardened.yaml deleted file mode 100644 index 147cac390..000000000 --- a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-k3s-cis-1.20-hardened.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: k3s-cis-1.20-hardened -spec: - clusterProvider: k3s - minKubernetesVersion: "1.19.0" - maxKubernetesVersion: "1.21.x" diff --git a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-k3s-cis-1.20-permissive.yaml b/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-k3s-cis-1.20-permissive.yaml deleted file mode 100644 index d9584f722..000000000 --- a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-k3s-cis-1.20-permissive.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: k3s-cis-1.20-permissive -spec: - clusterProvider: k3s - minKubernetesVersion: "1.19.0" - maxKubernetesVersion: "1.21.x" diff --git a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-k3s-cis-1.23-hardened.yaml b/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-k3s-cis-1.23-hardened.yaml deleted file mode 100644 index ee153603b..000000000 --- a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-k3s-cis-1.23-hardened.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: k3s-cis-1.23-hardened -spec: - clusterProvider: k3s - minKubernetesVersion: "1.22.0" diff --git a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-k3s-cis-1.23-permissive.yaml b/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-k3s-cis-1.23-permissive.yaml deleted file mode 100644 index 51f2186f3..000000000 --- a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-k3s-cis-1.23-permissive.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: k3s-cis-1.23-permissive -spec: - clusterProvider: k3s - minKubernetesVersion: "1.22.0" diff --git a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-k3s-cis-1.6-hardened.yaml b/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-k3s-cis-1.6-hardened.yaml deleted file mode 100644 index 5160cf795..000000000 --- a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-k3s-cis-1.6-hardened.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: k3s-cis-1.6-hardened -spec: - clusterProvider: k3s - minKubernetesVersion: "1.16.0" - maxKubernetesVersion: "1.18.x" diff --git a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-k3s-cis-1.6-permissive.yaml b/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-k3s-cis-1.6-permissive.yaml deleted file mode 100644 index 10c075985..000000000 --- a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-k3s-cis-1.6-permissive.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: k3s-cis-1.6-permissive -spec: - clusterProvider: k3s - minKubernetesVersion: "1.16.0" - maxKubernetesVersion: "1.18.x" diff --git a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-rke-cis-1.20-hardened.yaml b/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-rke-cis-1.20-hardened.yaml deleted file mode 100644 index 4924679cb..000000000 --- a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-rke-cis-1.20-hardened.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke-cis-1.20-hardened -spec: - clusterProvider: rke - minKubernetesVersion: "1.19.0" - maxKubernetesVersion: "1.21.x" diff --git a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-rke-cis-1.20-permissive.yaml b/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-rke-cis-1.20-permissive.yaml deleted file mode 100644 index 2db66d7c6..000000000 --- a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-rke-cis-1.20-permissive.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke-cis-1.20-permissive -spec: - clusterProvider: rke - minKubernetesVersion: "1.19.0" - maxKubernetesVersion: "1.21.x" diff --git a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-rke-cis-1.23-hardened.yaml b/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-rke-cis-1.23-hardened.yaml deleted file mode 100644 index f6a99698e..000000000 --- a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-rke-cis-1.23-hardened.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke-cis-1.23-hardened -spec: - clusterProvider: rke - minKubernetesVersion: "1.22.0" diff --git a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-rke-cis-1.23-permissive.yaml b/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-rke-cis-1.23-permissive.yaml deleted file mode 100644 index a26bd63cf..000000000 --- a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-rke-cis-1.23-permissive.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke-cis-1.23-permissive -spec: - clusterProvider: rke - minKubernetesVersion: "1.22.0" diff --git a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-rke-cis-1.5-hardened.yaml b/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-rke-cis-1.5-hardened.yaml deleted file mode 100644 index b9154f1ad..000000000 --- a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-rke-cis-1.5-hardened.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke-cis-1.5-hardened -spec: - clusterProvider: rke - minKubernetesVersion: "1.15.0" - maxKubernetesVersion: "1.15.x" diff --git a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-rke-cis-1.5-permissive.yaml b/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-rke-cis-1.5-permissive.yaml deleted file mode 100644 index 9da65d55d..000000000 --- a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-rke-cis-1.5-permissive.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke-cis-1.5-permissive -spec: - clusterProvider: rke - minKubernetesVersion: "1.15.0" - maxKubernetesVersion: "1.15.x" diff --git a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-rke-cis-1.6-hardened.yaml b/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-rke-cis-1.6-hardened.yaml deleted file mode 100644 index 77f8a31df..000000000 --- a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-rke-cis-1.6-hardened.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke-cis-1.6-hardened -spec: - clusterProvider: rke - minKubernetesVersion: "1.16.0" - maxKubernetesVersion: "1.18.x" diff --git a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-rke-cis-1.6-permissive.yaml b/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-rke-cis-1.6-permissive.yaml deleted file mode 100644 index 600b8df35..000000000 --- a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-rke-cis-1.6-permissive.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke-cis-1.6-permissive -spec: - clusterProvider: rke - minKubernetesVersion: "1.16.0" - maxKubernetesVersion: "1.18.x" diff --git a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-rke2-cis-1.20-hardened.yaml b/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-rke2-cis-1.20-hardened.yaml deleted file mode 100644 index b6cc88359..000000000 --- a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-rke2-cis-1.20-hardened.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke2-cis-1.20-hardened -spec: - clusterProvider: rke2 - minKubernetesVersion: "1.19.0" - maxKubernetesVersion: "1.21.x" diff --git a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-rke2-cis-1.20-permissive.yaml b/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-rke2-cis-1.20-permissive.yaml deleted file mode 100644 index fd898bfe8..000000000 --- a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-rke2-cis-1.20-permissive.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke2-cis-1.20-permissive -spec: - clusterProvider: rke2 - minKubernetesVersion: "1.19.0" - maxKubernetesVersion: "1.21.x" diff --git a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-rke2-cis-1.23-hardened.yaml b/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-rke2-cis-1.23-hardened.yaml deleted file mode 100644 index 90e356d72..000000000 --- a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-rke2-cis-1.23-hardened.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke2-cis-1.23-hardened -spec: - clusterProvider: rke2 - minKubernetesVersion: "1.22.0" diff --git a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-rke2-cis-1.23-permissive.yaml b/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-rke2-cis-1.23-permissive.yaml deleted file mode 100644 index deafdbda6..000000000 --- a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-rke2-cis-1.23-permissive.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke2-cis-1.23-permissive -spec: - clusterProvider: rke2 - minKubernetesVersion: "1.22.0" diff --git a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-rke2-cis-1.5-hardened.yaml b/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-rke2-cis-1.5-hardened.yaml deleted file mode 100644 index 20091ec2b..000000000 --- a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-rke2-cis-1.5-hardened.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke2-cis-1.5-hardened -spec: - clusterProvider: rke2 - minKubernetesVersion: "1.15.0" - maxKubernetesVersion: "1.15.x" diff --git a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-rke2-cis-1.5-permissive.yaml b/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-rke2-cis-1.5-permissive.yaml deleted file mode 100644 index 9a86906b0..000000000 --- a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-rke2-cis-1.5-permissive.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke2-cis-1.5-permissive -spec: - clusterProvider: rke2 - minKubernetesVersion: "1.15.0" - maxKubernetesVersion: "1.15.x" diff --git a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-rke2-cis-1.6-hardened.yaml b/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-rke2-cis-1.6-hardened.yaml deleted file mode 100644 index ea2549ef3..000000000 --- a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-rke2-cis-1.6-hardened.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke2-cis-1.6-hardened -spec: - clusterProvider: rke2 - minKubernetesVersion: "1.16.0" - maxKubernetesVersion: "1.18.x" diff --git a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-rke2-cis-1.6-permissive.yaml b/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-rke2-cis-1.6-permissive.yaml deleted file mode 100644 index 0afdaaa19..000000000 --- a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/benchmark-rke2-cis-1.6-permissive.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanBenchmark -metadata: - name: rke2-cis-1.6-permissive -spec: - clusterProvider: rke2 - minKubernetesVersion: "1.16.0" - maxKubernetesVersion: "1.18.x" diff --git a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/cis-roles.yaml b/charts/rancher-cis-benchmark/3.0.0-rc3/templates/cis-roles.yaml deleted file mode 100644 index 23c93dc65..000000000 --- a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/cis-roles.yaml +++ /dev/null @@ -1,49 +0,0 @@ ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - name: cis-admin -rules: - - apiGroups: - - cis.cattle.io - resources: - - clusterscanbenchmarks - - clusterscanprofiles - - clusterscans - - clusterscanreports - verbs: ["create", "update", "delete", "patch","get", "watch", "list"] - - apiGroups: - - catalog.cattle.io - resources: ["apps"] - resourceNames: ["rancher-cis-benchmark"] - verbs: ["get", "watch", "list"] - - apiGroups: - - "" - resources: - - configmaps - verbs: - - '*' ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - name: cis-view -rules: - - apiGroups: - - cis.cattle.io - resources: - - clusterscanbenchmarks - - clusterscanprofiles - - clusterscans - - clusterscanreports - verbs: ["get", "watch", "list"] - - apiGroups: - - catalog.cattle.io - resources: ["apps"] - resourceNames: ["rancher-cis-benchmark"] - verbs: ["get", "watch", "list"] - - apiGroups: - - "" - resources: - - configmaps - verbs: ["get", "watch", "list"] diff --git a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/configmap.yaml b/charts/rancher-cis-benchmark/3.0.0-rc3/templates/configmap.yaml deleted file mode 100644 index 1a9cd1809..000000000 --- a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/configmap.yaml +++ /dev/null @@ -1,18 +0,0 @@ -kind: ConfigMap -apiVersion: v1 -metadata: - name: default-clusterscanprofiles - namespace: {{ template "cis.namespace" . }} -data: - # Default ClusterScanProfiles per cluster provider type - rke: |- - <1.21.0: rke-profile-permissive-1.20 - >=1.21.0: rke-profile-permissive-1.23 - rke2: |- - <1.21.0: rke2-cis-1.20-profile-permissive - >=1.21.0: rke2-cis-1.23-profile-permissive - eks: "eks-profile" - gke: "gke-profile" - aks: "aks-profile" - k3s: "k3s-cis-1.23-profile-permissive" - default: "cis-1.23-profile" diff --git a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/deployment.yaml b/charts/rancher-cis-benchmark/3.0.0-rc3/templates/deployment.yaml deleted file mode 100644 index ab0bb3e24..000000000 --- a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/deployment.yaml +++ /dev/null @@ -1,55 +0,0 @@ -apiVersion: apps/v1 -kind: Deployment -metadata: - name: cis-operator - namespace: {{ template "cis.namespace" . }} - labels: - cis.cattle.io/operator: cis-operator -spec: - selector: - matchLabels: - cis.cattle.io/operator: cis-operator - template: - metadata: - labels: - cis.cattle.io/operator: cis-operator - spec: - serviceAccountName: cis-operator-serviceaccount - containers: - - name: cis-operator - image: '{{ template "system_default_registry" . }}{{ .Values.image.cisoperator.repository }}:{{ .Values.image.cisoperator.tag }}' - imagePullPolicy: Always - ports: - - name: cismetrics - containerPort: {{ .Values.alerts.metricsPort }} - env: - - name: SECURITY_SCAN_IMAGE - value: {{ template "system_default_registry" . }}{{ .Values.image.securityScan.repository }} - - name: SECURITY_SCAN_IMAGE_TAG - value: {{ .Values.image.securityScan.tag }} - - name: SONOBUOY_IMAGE - value: {{ template "system_default_registry" . }}{{ .Values.image.sonobuoy.repository }} - - name: SONOBUOY_IMAGE_TAG - value: {{ .Values.image.sonobuoy.tag }} - - name: CIS_ALERTS_METRICS_PORT - value: '{{ .Values.alerts.metricsPort }}' - - name: CIS_ALERTS_SEVERITY - value: {{ .Values.alerts.severity }} - - name: CIS_ALERTS_ENABLED - value: {{ .Values.alerts.enabled | default "false" | quote }} - - name: CLUSTER_NAME - value: '{{ .Values.global.cattle.clusterName }}' - resources: - {{- toYaml .Values.resources | nindent 12 }} - nodeSelector: {{ include "linux-node-selector" . | nindent 8 }} -{{- if .Values.nodeSelector }} -{{ toYaml .Values.nodeSelector | indent 8 }} -{{- end }} - tolerations: {{ include "linux-node-tolerations" . | nindent 8 }} -{{- if .Values.tolerations }} -{{ toYaml .Values.tolerations | indent 8 }} -{{- end }} - {{- with .Values.affinity }} - affinity: - {{- toYaml . | nindent 8 }} - {{- end }} diff --git a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/network_policy_allow_all.yaml b/charts/rancher-cis-benchmark/3.0.0-rc3/templates/network_policy_allow_all.yaml deleted file mode 100644 index 6ed5d645e..000000000 --- a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/network_policy_allow_all.yaml +++ /dev/null @@ -1,15 +0,0 @@ ---- -apiVersion: networking.k8s.io/v1 -kind: NetworkPolicy -metadata: - name: default-allow-all - namespace: {{ template "cis.namespace" . }} -spec: - podSelector: {} - ingress: - - {} - egress: - - {} - policyTypes: - - Ingress - - Egress diff --git a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/patch_default_serviceaccount.yaml b/charts/rancher-cis-benchmark/3.0.0-rc3/templates/patch_default_serviceaccount.yaml deleted file mode 100644 index e78a6bd08..000000000 --- a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/patch_default_serviceaccount.yaml +++ /dev/null @@ -1,29 +0,0 @@ ---- -apiVersion: batch/v1 -kind: Job -metadata: - name: patch-sa - annotations: - "helm.sh/hook": post-install, post-upgrade - "helm.sh/hook-delete-policy": hook-succeeded, before-hook-creation -spec: - template: - spec: - serviceAccountName: cis-operator-serviceaccount - nodeSelector: {{ include "linux-node-selector" . | nindent 8 }} -{{- if .Values.nodeSelector }} -{{ toYaml .Values.nodeSelector | indent 8 }} -{{- end }} - tolerations: {{ include "linux-node-tolerations" . | nindent 8 }} -{{- if .Values.tolerations }} -{{ toYaml .Values.tolerations | indent 8 }} -{{- end }} - restartPolicy: Never - containers: - - name: sa - image: "{{ template "system_default_registry" . }}{{ .Values.global.kubectl.repository }}:{{ .Values.global.kubectl.tag }}" - imagePullPolicy: {{ .Values.global.imagePullPolicy }} - command: ["kubectl", "patch", "serviceaccount", "default", "-p", "{\"automountServiceAccountToken\": false}"] - args: ["-n", {{ template "cis.namespace" . }}] - - backoffLimit: 1 diff --git a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/rbac.yaml b/charts/rancher-cis-benchmark/3.0.0-rc3/templates/rbac.yaml deleted file mode 100644 index 4ff88ea5f..000000000 --- a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/rbac.yaml +++ /dev/null @@ -1,43 +0,0 @@ -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - labels: - app.kubernetes.io/name: rancher-cis-benchmark - app.kubernetes.io/instance: release-name - name: cis-operator-role -rules: -- apiGroups: - - '*' - resources: - - '*' - verbs: - - '*' ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - labels: - app.kubernetes.io/name: rancher-cis-benchmark - app.kubernetes.io/instance: release-name - name: cis-operator-rolebinding -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: cis-operator-role -subjects: -- kind: ServiceAccount - name: cis-serviceaccount - namespace: {{ template "cis.namespace" . }} ---- -kind: ClusterRoleBinding -apiVersion: rbac.authorization.k8s.io/v1 -metadata: - name: cis-operator-installer -subjects: -- kind: ServiceAccount - name: cis-operator-serviceaccount - namespace: {{ template "cis.namespace" . }} -roleRef: - kind: ClusterRole - name: cluster-admin - apiGroup: rbac.authorization.k8s.io \ No newline at end of file diff --git a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-cis-1.20.yaml b/charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-cis-1.20.yaml deleted file mode 100644 index 05263ce7d..000000000 --- a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-cis-1.20.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: cis-1.20-profile - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: cis-1.20 diff --git a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-cis-1.23.yaml b/charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-cis-1.23.yaml deleted file mode 100644 index c59d8f51f..000000000 --- a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-cis-1.23.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: cis-1.23-profile - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: cis-1.23 diff --git a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-cis-1.6.yaml b/charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-cis-1.6.yaml deleted file mode 100644 index 8a8d8bf88..000000000 --- a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-cis-1.6.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: cis-1.6-profile - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: cis-1.6 diff --git a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-k3s-cis-1.20-hardened.yml b/charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-k3s-cis-1.20-hardened.yml deleted file mode 100644 index a0b6cb6f6..000000000 --- a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-k3s-cis-1.20-hardened.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: k3s-cis-1.20-profile-hardened - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: k3s-cis-1.20-hardened diff --git a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-k3s-cis-1.20-permissive.yml b/charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-k3s-cis-1.20-permissive.yml deleted file mode 100644 index 89885548d..000000000 --- a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-k3s-cis-1.20-permissive.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: k3s-cis-1.20-profile-permissive - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: k3s-cis-1.20-permissive diff --git a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-k3s-cis-1.23-hardened.yml b/charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-k3s-cis-1.23-hardened.yml deleted file mode 100644 index 724412d3a..000000000 --- a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-k3s-cis-1.23-hardened.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: k3s-cis-1.23-profile-hardened - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: k3s-cis-1.23-hardened diff --git a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-k3s-cis-1.23-permissive.yml b/charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-k3s-cis-1.23-permissive.yml deleted file mode 100644 index 9f9213de1..000000000 --- a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-k3s-cis-1.23-permissive.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: k3s-cis-1.23-profile-permissive - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: k3s-cis-1.23-permissive diff --git a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-k3s-cis-1.6-hardened.yml b/charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-k3s-cis-1.6-hardened.yml deleted file mode 100644 index 095e977ab..000000000 --- a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-k3s-cis-1.6-hardened.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: k3s-cis-1.6-profile-hardened - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: k3s-cis-1.6-hardened diff --git a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-k3s-cis-1.6-permissive.yml b/charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-k3s-cis-1.6-permissive.yml deleted file mode 100644 index 3b22a80c8..000000000 --- a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-k3s-cis-1.6-permissive.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: k3s-cis-1.6-profile-permissive - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: k3s-cis-1.6-permissive diff --git a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-rke-1.20-hardened.yaml b/charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-rke-1.20-hardened.yaml deleted file mode 100644 index c36cf38c9..000000000 --- a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-rke-1.20-hardened.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: rke-profile-hardened-1.20 - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: rke-cis-1.20-hardened diff --git a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-rke-1.20-permissive.yaml b/charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-rke-1.20-permissive.yaml deleted file mode 100644 index cfeb4b34c..000000000 --- a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-rke-1.20-permissive.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: rke-profile-permissive-1.20 - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: rke-cis-1.20-permissive diff --git a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-rke-1.23-hardened.yaml b/charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-rke-1.23-hardened.yaml deleted file mode 100644 index 007331149..000000000 --- a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-rke-1.23-hardened.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: rke-profile-hardened-1.23 - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: rke-cis-1.23-hardened diff --git a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-rke-1.23-permissive.yaml b/charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-rke-1.23-permissive.yaml deleted file mode 100644 index 085b60dfa..000000000 --- a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-rke-1.23-permissive.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: rke-profile-permissive-1.23 - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: rke-cis-1.23-permissive diff --git a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-rke-1.6-hardened.yaml b/charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-rke-1.6-hardened.yaml deleted file mode 100644 index d38febd80..000000000 --- a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-rke-1.6-hardened.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: rke-profile-hardened-1.6 - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: rke-cis-1.6-hardened diff --git a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-rke-1.6-permissive.yaml b/charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-rke-1.6-permissive.yaml deleted file mode 100644 index d31b5b0d2..000000000 --- a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-rke-1.6-permissive.yaml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: rke-profile-permissive-1.6 - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: rke-cis-1.6-permissive diff --git a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-rke2-cis-1.20-hardened.yml b/charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-rke2-cis-1.20-hardened.yml deleted file mode 100644 index decc9b651..000000000 --- a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-rke2-cis-1.20-hardened.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: rke2-cis-1.20-profile-hardened - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: rke2-cis-1.20-hardened diff --git a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-rke2-cis-1.20-permissive.yml b/charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-rke2-cis-1.20-permissive.yml deleted file mode 100644 index 74c96ffc4..000000000 --- a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-rke2-cis-1.20-permissive.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: rke2-cis-1.20-profile-permissive - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: rke2-cis-1.20-permissive diff --git a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-rke2-cis-1.23-hardened.yml b/charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-rke2-cis-1.23-hardened.yml deleted file mode 100644 index abc1c2a21..000000000 --- a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-rke2-cis-1.23-hardened.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: rke2-cis-1.23-profile-hardened - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: rke2-cis-1.23-hardened diff --git a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-rke2-cis-1.23-permissive.yml b/charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-rke2-cis-1.23-permissive.yml deleted file mode 100644 index 51cc519ac..000000000 --- a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-rke2-cis-1.23-permissive.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: rke2-cis-1.23-profile-permissive - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: rke2-cis-1.23-permissive diff --git a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-rke2-cis-1.6-hardened.yml b/charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-rke2-cis-1.6-hardened.yml deleted file mode 100644 index c7ac7f949..000000000 --- a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-rke2-cis-1.6-hardened.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: rke2-cis-1.6-profile-hardened - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: rke2-cis-1.6-hardened diff --git a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-rke2-cis-1.6-permissive.yml b/charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-rke2-cis-1.6-permissive.yml deleted file mode 100644 index 96ca1345a..000000000 --- a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofile-rke2-cis-1.6-permissive.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: rke2-cis-1.6-profile-permissive - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: rke2-cis-1.6-permissive diff --git a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofileaks.yml b/charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofileaks.yml deleted file mode 100644 index ea7b25b40..000000000 --- a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofileaks.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: aks-profile - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: aks-1.0 \ No newline at end of file diff --git a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofileeks.yml b/charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofileeks.yml deleted file mode 100644 index 3b4e34437..000000000 --- a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofileeks.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: eks-profile - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: eks-1.0.1 \ No newline at end of file diff --git a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofilegke.yml b/charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofilegke.yml deleted file mode 100644 index 2ddd0686f..000000000 --- a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/scanprofilegke.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -apiVersion: cis.cattle.io/v1 -kind: ClusterScanProfile -metadata: - name: gke-profile - annotations: - clusterscanprofile.cis.cattle.io/builtin: "true" -spec: - benchmarkVersion: gke-1.0 \ No newline at end of file diff --git a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/serviceaccount.yaml b/charts/rancher-cis-benchmark/3.0.0-rc3/templates/serviceaccount.yaml deleted file mode 100644 index ec48ec622..000000000 --- a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/serviceaccount.yaml +++ /dev/null @@ -1,14 +0,0 @@ -apiVersion: v1 -kind: ServiceAccount -metadata: - namespace: {{ template "cis.namespace" . }} - name: cis-operator-serviceaccount ---- -apiVersion: v1 -kind: ServiceAccount -metadata: - namespace: {{ template "cis.namespace" . }} - labels: - app.kubernetes.io/name: rancher-cis-benchmark - app.kubernetes.io/instance: release-name - name: cis-serviceaccount diff --git a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/validate-install-crd.yaml b/charts/rancher-cis-benchmark/3.0.0-rc3/templates/validate-install-crd.yaml deleted file mode 100644 index 562295791..000000000 --- a/charts/rancher-cis-benchmark/3.0.0-rc3/templates/validate-install-crd.yaml +++ /dev/null @@ -1,17 +0,0 @@ -#{{- if gt (len (lookup "rbac.authorization.k8s.io/v1" "ClusterRole" "" "")) 0 -}} -# {{- $found := dict -}} -# {{- set $found "cis.cattle.io/v1/ClusterScan" false -}} -# {{- set $found "cis.cattle.io/v1/ClusterScanBenchmark" false -}} -# {{- set $found "cis.cattle.io/v1/ClusterScanProfile" false -}} -# {{- set $found "cis.cattle.io/v1/ClusterScanReport" false -}} -# {{- range .Capabilities.APIVersions -}} -# {{- if hasKey $found (toString .) -}} -# {{- set $found (toString .) true -}} -# {{- end -}} -# {{- end -}} -# {{- range $_, $exists := $found -}} -# {{- if (eq $exists false) -}} -# {{- required "Required CRDs are missing. Please install the corresponding CRD chart before installing this chart." "" -}} -# {{- end -}} -# {{- end -}} -#{{- end -}} \ No newline at end of file diff --git a/charts/rancher-cis-benchmark/3.0.0-rc3/values.yaml b/charts/rancher-cis-benchmark/3.0.0-rc3/values.yaml deleted file mode 100644 index d6cf7c43e..000000000 --- a/charts/rancher-cis-benchmark/3.0.0-rc3/values.yaml +++ /dev/null @@ -1,49 +0,0 @@ -# Default values for rancher-cis-benchmark. -# This is a YAML-formatted file. -# Declare variables to be passed into your templates. - -image: - cisoperator: - repository: rancher/cis-operator - tag: v1.0.10-rc2 - securityScan: - repository: rancher/security-scan - tag: v0.2.9-rc3 - sonobuoy: - repository: rancher/mirrored-sonobuoy-sonobuoy - tag: v0.56.7 - -resources: {} - # We usually recommend not to specify default resources and to leave this as a conscious - # choice for the user. This also increases chances charts run on environments with little - # resources, such as Minikube. If you do want to specify resources, uncomment the following - # lines, adjust them as necessary, and remove the curly braces after 'resources:'. - # limits: - # cpu: 100m - # memory: 128Mi - # requests: - # cpu: 100m - # memory: 128Mi - -## Node labels for pod assignment -## Ref: https://kubernetes.io/docs/user-guide/node-selection/ -## -nodeSelector: {} - -## List of node taints to tolerate (requires Kubernetes >= 1.6) -tolerations: [] - -affinity: {} - -global: - cattle: - systemDefaultRegistry: "" - clusterName: "" - kubectl: - repository: rancher/kubectl - tag: v1.20.2 - -alerts: - enabled: false - severity: warning - metricsPort: 8080 diff --git a/index.yaml b/index.yaml index f3d929645..b9f9808ff 100755 --- a/index.yaml +++ b/index.yaml @@ -3369,32 +3369,6 @@ entries: - assets/rancher-backup-crd/rancher-backup-crd-1.0.200.tgz version: 1.0.200 rancher-cis-benchmark: - - annotations: - catalog.cattle.io/auto-install: rancher-cis-benchmark-crd=match - catalog.cattle.io/certified: rancher - catalog.cattle.io/display-name: CIS Benchmark - catalog.cattle.io/kube-version: '>= 1.21.0-0 < 1.25.0-0' - catalog.cattle.io/namespace: cis-operator-system - catalog.cattle.io/os: linux - catalog.cattle.io/permits-os: linux,windows - catalog.cattle.io/provides-gvr: cis.cattle.io.clusterscans/v1 - catalog.cattle.io/rancher-version: '>= 2.7.0-0 < 2.8.0-0' - catalog.cattle.io/release-name: rancher-cis-benchmark - catalog.cattle.io/type: cluster-tool - catalog.cattle.io/ui-component: rancher-cis-benchmark - apiVersion: v1 - appVersion: v3.0.0 - created: "2022-09-27T12:56:21.141597878+05:30" - description: The cis-operator enables running CIS benchmark security scans on - a kubernetes cluster - digest: 0f6b96ff0a30558b0fbfa30ca0a481dbbfb5cc914404d67fba5d24345a132fee - icon: https://charts.rancher.io/assets/logos/cis-kube-bench.svg - keywords: - - security - name: rancher-cis-benchmark - urls: - - assets/rancher-cis-benchmark/rancher-cis-benchmark-3.0.0-rc3.tgz - version: 3.0.0-rc3 - annotations: catalog.cattle.io/auto-install: rancher-cis-benchmark-crd=match catalog.cattle.io/certified: rancher @@ -3709,20 +3683,6 @@ entries: - assets/rancher-cis-benchmark/rancher-cis-benchmark-1.0.100.tgz version: 1.0.100 rancher-cis-benchmark-crd: - - annotations: - catalog.cattle.io/certified: rancher - catalog.cattle.io/hidden: "true" - catalog.cattle.io/namespace: cis-operator-system - catalog.cattle.io/release-name: rancher-cis-benchmark-crd - apiVersion: v1 - created: "2022-09-27T12:56:21.14359279+05:30" - description: Installs the CRDs for rancher-cis-benchmark. - digest: 7f51d13d807619f495c0cf3a1c0dec2e0c7a7187a315b1fc2867ca60493fb517 - name: rancher-cis-benchmark-crd - type: application - urls: - - assets/rancher-cis-benchmark-crd/rancher-cis-benchmark-crd-3.0.0-rc3.tgz - version: 3.0.0-rc3 - annotations: catalog.cattle.io/certified: rancher catalog.cattle.io/hidden: "true"