Commit Graph

135 Commits (622df4edc0d869cca4cbbdfc0481272e41821e7a)

Author SHA1 Message Date
Vardhaman Surana 0a0400686d
[dev-v2.9] rancher-cis-benchmark 6.1.0-rc1 add (#4303) 2024-08-07 13:12:30 +05:30
Vardhaman Surana 3038efd7fd
[dev-v2.9] rancher-cis-benchmark 6.0.0 unrc (#4234) 2024-07-17 10:24:21 +05:30
Krunal Hingu cc6e1ac756
[dev-v2.9] rancher-cis-benchmark 6.0.0-rc4 update (#4166) 2024-07-03 10:18:16 +05:30
Krunal Hingu 094ad1598a
[dev-v2.9] rancher-cis-benchmark 6.0.0-rc3 update (#4066) 2024-06-14 10:18:46 +05:30
Chirayu Kapoor 2523db09a4
[dev-v2.9] rancher-cis-benchmark 6.0.0-rc2 update (#3902)
Signed-off-by: Chirayu Kapoor <chirayu.kapoor@suse.com>
2024-05-16 10:17:54 +05:30
Rayan Das 8dbade3ef0 bump cis-benchmark chart version to v6.0.0-rc1 2024-01-03 10:36:20 +05:30
Rayan Das 46720d5432 bump security-scan and sonobuoy version 2023-12-18 16:06:50 +05:30
Rayan Das ab8b887c7d add eks 1.2.0 and bump chart version 2023-12-18 16:06:48 +05:30
Chirayu Kapoor 9de1e22d2f bump to v5.1.0-rc1
Signed-off-by: Chirayu Kapoor <chirayu.kapoor@suse.com>
2023-12-18 14:38:34 +05:30
Chirayu Kapoor 20ed188b81 Add create verb to access prometheusrules resource of monitoring.coreos.com api group
Signed-off-by: Chirayu Kapoor <chirayu.kapoor@suse.com>
2023-12-18 14:38:34 +05:30
Jonathan Crowther 018aae02ed Release cis-benchmark to v5.0.0 2023-10-23 09:44:35 -04:00
Rayan Das e1510da1a2 update the api version 2023-09-29 00:20:09 +05:30
Rayan Das fb1097ce12 update kube-version annotation and bump chart version 2023-09-27 21:42:40 +05:30
Rayan Das 8d9d536a8f bump cis-benchmark chart version 2023-09-15 13:11:22 +05:30
Rayan Das 0dae32b4ba add maxKubernetesVersion for cis 1.23 benchmark for rke, rke2, and k3s 2023-09-15 13:00:02 +05:30
Rayan Das 8576a0d4db add cis 1.7 in configmap.yaml 2023-09-15 12:54:34 +05:30
Rayan Das f139d0b135 bump GKE to 1.2.0 2023-09-15 12:51:31 +05:30
Rayan Das 10497575b9 add CIS profiles for RKE RKE2 and K3s 2023-09-15 12:48:11 +05:30
Chirayu Kapoor cd4ee854fe
Bump kubectl to v1.28.1
Signed-off-by: Chirayu Kapoor <dev.csociety@gmail.com>
2023-09-14 01:20:39 +05:30
Chirayu Kapoor b6ddc03a8a
Bump security scan to v0.2.13
Signed-off-by: Chirayu Kapoor <dev.csociety@gmail.com>
2023-09-13 11:19:53 +05:30
Rayan Das 1f269e4fd3 added 1.27 support and bump chart version 2023-09-06 19:45:49 +05:30
Diogo Souza c75749a194 copy rancher-cis-benchmark version 102.x.x to 103.x.x 2023-08-14 17:59:12 -03:00
vardhaman 0929619d26 unrc CIS benchmark chart 2023-06-08 18:06:37 +05:30
Rayan Das be298c7cb9 bump security-scan version to v0.2.12-rc2 2023-05-23 19:26:02 +05:30
Rayan Das ae423ad879 updated kube-version annotaion to support K8s 1.26.x 2023-05-15 11:58:59 +05:30
Rayan Das 3bb4d1f718 bum cis-benchmark to include latest security-scan, cis-operator, kubectl and sonobuoy version 2023-05-11 11:44:25 +05:30
vardhaman 2b68ad24af unrc rancher-cis-benchmark chart 2023-04-05 10:35:04 +05:30
Rayan Das 8d65bd9ae9 updated RBAC to fix RKE1 hardened 5.7.4 and RKE2 hardened 5.2.2 an 5.2.8
tests and bumped security-scan tag
2023-03-15 19:24:08 +05:30
vardhaman 44e6e8e5e3 CIS: added network policy related permissions to cis-scan-ns clusterrole 2023-02-24 21:48:09 +05:30
Rayan Das fd5aaacdd1 bump CIS Benchmark version to include new security-scan image 2023-02-22 16:33:26 +05:30
Mauren Berti ce1769a6f0
make charts 2023-02-09 09:45:25 -05:00
Mauren Berti 79a977493b
Update PSP approach for rancher-cis-benchmark.
* Remove all previous capabilities checks.
* Bump version from 3.0.1-rc6 to 4.0.0-rc1.
* Add new flag global.cattle.psp.enabled to control installation of PodSecurityPolicies.
* Add new validate-psp-install.yaml file to check whether PSPs can be installed.
* Update app-readme.md with PSP notice.
* Bump Kubernetes compatibility versions to < 1.26.0.
2023-02-09 09:22:06 -05:00
vardhaman 0f5ef706c1 CIS: updated clusterrolebinding name
also removed the unnecessary hook for deleting role binding
2023-02-07 17:54:12 +05:30
vardhaman 332dc80f61 bump cis-operator and cis benchmark chart version 2023-02-01 10:47:14 +05:30
vardhaman 1e8345e71d added tolerations variable for security scan job 2023-02-01 10:28:52 +05:30
Rayan Das 56bb7b322f bump security-scan version, cis-operator, and chart version 2023-01-25 17:15:58 +05:30
Rayan Das 115a07afba bump cis-benchmark version and chart version 2023-01-12 13:40:10 +05:30
Rayan Das 6335f0ec97 add condition to check for PSP capability in rancher-cis-benchmark 2023-01-11 22:42:48 +05:30
Rayan Das 6432a683b4 bump security-scan and cis-operator to the latest rc version 2022-12-20 14:42:27 +05:30
Vaishnav Gaikwad 8edef0570a Update cis-operator imagePullPolicy 2022-12-15 19:59:13 +05:30
vardhaman 39a83006e9 CIS BENCHMARK: added debug env var for cis operator 2022-12-06 11:48:40 +05:30
vardhaman 11895ff5bd updating cis to non rc v3.0.0 2022-11-09 14:37:41 +05:30
galal-hussein 5f2f0ba3dc update security-scan image 2022-10-19 18:02:30 +02:00
galal-hussein 3d4a61d672 fix permissions for cis-serviceaccount 2022-10-18 22:59:53 +02:00
galal-hussein 7641784193 Add PSP for cis-benchmark 2022-10-14 21:06:23 +02:00
Rayan Das d6cf998f18 bump security-scan to v0.2.9-rc4 2022-10-14 09:55:16 +05:30
galal-hussein 3fc4b81e99 Add privielges to cis-operator-serviceaccount in cis-operator namespace 2022-10-14 02:05:27 +02:00
galal-hussein 9a8fbadde3 Add pre-hook for upgrade fix and add serviceaccounts rbac 2022-10-13 20:51:13 +02:00
galal-hussein e0c2133e61 Add RBAC roles for cis benchmark chart 2022-10-12 20:07:16 +02:00
mitulshah-suse b626fd44bc update images and version 2022-09-27 12:55:51 +05:30