andata
/
rancher-charts
mirror of https://git.rancher.io/charts
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
4,122 Commits
48 Branches
2 Tags
481 MiB
Commit Graph

16 Commits (1ede25ab19527451b769f248b4b0b2d179d42591)

Author SHA1 Message Date
Chirayu Kapoor 20ed188b81 Add create verb to access prometheusrules resource of monitoring.coreos.com api group 
Signed-off-by: Chirayu Kapoor <chirayu.kapoor@suse.com>
 2023-12-18 14:38:34 +05:30
Rayan Das 8d65bd9ae9 updated RBAC to fix RKE1 hardened 5.7.4 and RKE2 hardened 5.2.2 an 5.2.8 
tests and bumped security-scan tag
 2023-03-15 19:24:08 +05:30
vardhaman 44e6e8e5e3 CIS: added network policy related permissions to cis-scan-ns clusterrole 2023-02-24 21:48:09 +05:30
Mauren Berti 79a977493b
Update PSP approach for rancher-cis-benchmark. 
* Remove all previous capabilities checks.
* Bump version from 3.0.1-rc6 to 4.0.0-rc1.
* Add new flag global.cattle.psp.enabled to control installation of PodSecurityPolicies.
* Add new validate-psp-install.yaml file to check whether PSPs can be installed.
* Update app-readme.md with PSP notice.
* Bump Kubernetes compatibility versions to < 1.26.0.
 2023-02-09 09:22:06 -05:00
vardhaman 0f5ef706c1 CIS: updated clusterrolebinding name 
also removed the unnecessary hook for deleting role binding
 2023-02-07 17:54:12 +05:30
Rayan Das 6335f0ec97 add condition to check for PSP capability in rancher-cis-benchmark 2023-01-11 22:42:48 +05:30
galal-hussein 3d4a61d672 fix permissions for cis-serviceaccount 2022-10-18 22:59:53 +02:00
galal-hussein 3fc4b81e99 Add privielges to cis-operator-serviceaccount in cis-operator namespace 2022-10-14 02:05:27 +02:00
galal-hussein 9a8fbadde3 Add pre-hook for upgrade fix and add serviceaccounts rbac 2022-10-13 20:51:13 +02:00
galal-hussein e0c2133e61 Add RBAC roles for cis benchmark chart 2022-10-12 20:07:16 +02:00
Jacob Payne 7821fd2296
(dev-v2.6-archive) Fix/issue 32301 (#1247) 
* cis 1.0.6 1.22 fixes

* make charts

(partially cherry picked from commit 0e089425ab)
 2022-01-06 11:34:09 -08:00
Arvind Iyengar 63af4011e1
(dev-v2.6-archive) Checkout current packages from dev-v2.5-source 
```bash
git fetch upstream
git checkout upstream/dev-v2.5-source -- packages; git reset HEAD; git checkout -- packages/README.md
```

(partially cherry picked from commit 551327b14e)
 2022-01-06 11:33:32 -08:00
actions decb1db44b
(dev-v2.6-archive) Generated changes 
(partially cherry picked from commit 88defdad62)
 2022-01-06 11:33:31 -08:00
Prachi Damle 3a84d26ed3
(dev-v2.6-archive) Adding rancher-cis-benchmark-crds - CRD chart for CIS v2 
Adding rancher-cis-benchmark - Main chart for deploying cis-operator

Review comments and changes CRDs and adding the roles

Adding default ClusterScanProfiles in a Configmap

Updating kubernetes version to have major.minor.patch

Package the CRDs within the original chart and add package.yaml

chart changes for tolerations, crds, added
global.cattle.systemDefaultRegistry

Review changes to removed nodeSelector helper, combine all cis clusterroles in one file

CRD name change and adding keywords, moving package.yaml one folder upi
Renamed hardened benchmark
Move providesGVR to chart.yaml

(partially cherry picked from commit b55e6ec019)
 2022-01-06 11:32:59 -08:00
Caleb Bron 2087de28b5 clean up main 2020-09-30 16:45:24 -07:00
Prachi Damle b55e6ec019 Adding rancher-cis-benchmark-crds - CRD chart for CIS v2 
Adding rancher-cis-benchmark - Main chart for deploying cis-operator

Review comments and changes CRDs and adding the roles

Adding default ClusterScanProfiles in a Configmap

Updating kubernetes version to have major.minor.patch

Package the CRDs within the original chart and add package.yaml

chart changes for tolerations, crds, added
global.cattle.systemDefaultRegistry

Review changes to removed nodeSelector helper, combine all cis clusterroles in one file

CRD name change and adding keywords, moving package.yaml one folder upi
Renamed hardened benchmark
Move providesGVR to chart.yaml
 2020-09-09 15:45:25 -07:00