Commit Graph

24 Commits (b891c193d16ff340007567ccdbbe6efd86281c9c)

Author SHA1 Message Date
dhruvmewada15 324b47d504 Added cis-1.23 profiles for base CIS, rke1, rke2, k3s 2022-07-11 16:31:35 +05:30
dhruvmewada15 463e7431dd Added cis-1.20 profiles for base CIS, rke1, rke2, k3s 2022-07-11 16:22:15 +05:30
Vaishnav Gaikwad 6929fe59ab Bump security-scan version
New security-scan image has the eks-version fix
2022-06-23 19:16:13 +05:30
Vaishnav Gaikwad ccc57dfdf4 make clusterName string 2022-06-14 09:32:19 +05:30
Arvind Iyengar 5bf902b453
Fix rancher-cis-benchmark nodeSelector and tolerations 2022-03-18 13:58:09 -07:00
Luther Monson be5a59aeac add permits-os to all charts that needed it 2022-03-02 17:11:40 -07:00
dhruvmewada15 b0bc7a03ba Add AKS CIS Scan benchmark config 2022-02-15 23:04:00 +05:30
Jacob Payne 7821fd2296
(dev-v2.6-archive) Fix/issue 32301 (#1247)
* cis 1.0.6 1.22 fixes

* make charts

(partially cherry picked from commit 0e089425ab)
2022-01-06 11:34:09 -08:00
Arvind Iyengar 63af4011e1
(dev-v2.6-archive) Checkout current packages from dev-v2.5-source
```bash
git fetch upstream
git checkout upstream/dev-v2.5-source -- packages; git reset HEAD; git checkout -- packages/README.md
```

(partially cherry picked from commit 551327b14e)
2022-01-06 11:33:32 -08:00
actions decb1db44b
(dev-v2.6-archive) Generated changes
(partially cherry picked from commit 88defdad62)
2022-01-06 11:33:31 -08:00
Prachi Damle a63a0d586a
(dev-v2.6-archive) Merge pull request #676 from prachidamle/airgap_fix
Use global registry for security-scan and sonobuoy tool images to support airgapped setups

(partially cherry picked from commit 0f786657a2)
2022-01-06 11:33:27 -08:00
Jacob Payne fba428baa7
(dev-v2.6-archive) allow tolerations to be passed to fluentbit containers (#673)
(partially cherry picked from commit 91d1dedca1)
2022-01-06 11:33:27 -08:00
Prachi Damle 2d82003905
(dev-v2.6-archive) Use the system_default_registry for security-scan and sonobuoy images
Deleting tgz assets

(partially cherry picked from commit 42f30bfad1)
2022-01-06 11:33:26 -08:00
aiyengar2 f04ef106ae
(dev-v2.6-archive) Merge pull request #662 from aiyengar2/use_new_busybox
Replace rancher/busybox w/ rancher/library-busybox

(partially cherry picked from commit afb3af8690)
2022-01-06 11:33:18 -08:00
rajashree 748bfc929f
(dev-v2.6-archive) Update resourceset to include configmaps for clusterrepos
(partially cherry picked from commit b3cc3a717c)
2022-01-06 11:33:18 -08:00
Prachi Damle 866397beaa
(dev-v2.6-archive) Delete tgz files from assets, parameter in the post-install hook for namespace should use the
helm templating

(partially cherry picked from commit 2dd35d89bb)
2022-01-06 11:33:16 -08:00
Darren Shepherd 824e9a5211
(dev-v2.6-archive) fleet-0.3.0-beta1
(partially cherry picked from commit ecd90e66af)
2022-01-06 11:33:15 -08:00
Prachi Damle 3b038e7b76
(dev-v2.6-archive) Fixes to clear error state on scan retry, fixes for CIS hardened cluster
(partially cherry picked from commit af609af172)
2022-01-06 11:33:15 -08:00
Prachi Damle 3a84d26ed3
(dev-v2.6-archive) Adding rancher-cis-benchmark-crds - CRD chart for CIS v2
Adding rancher-cis-benchmark - Main chart for deploying cis-operator

Review comments and changes CRDs and adding the roles

Adding default ClusterScanProfiles in a Configmap

Updating kubernetes version to have major.minor.patch

Package the CRDs within the original chart and add package.yaml

chart changes for tolerations, crds, added
global.cattle.systemDefaultRegistry

Review changes to removed nodeSelector helper, combine all cis clusterroles in one file

CRD name change and adding keywords, moving package.yaml one folder upi
Renamed hardened benchmark
Move providesGVR to chart.yaml

(partially cherry picked from commit b55e6ec019)
2022-01-06 11:32:59 -08:00
Caleb Bron 2087de28b5 clean up main 2020-09-30 16:45:24 -07:00
Prachi Damle 42f30bfad1 Use the system_default_registry for security-scan and sonobuoy images
Deleting tgz assets
2020-09-21 15:21:56 -07:00
Prachi Damle 2dd35d89bb Delete tgz files from assets, parameter in the post-install hook for namespace should use the
helm templating
2020-09-18 10:36:16 -07:00
Prachi Damle af609af172 Fixes to clear error state on scan retry, fixes for CIS hardened cluster 2020-09-18 00:33:33 -07:00
Prachi Damle b55e6ec019 Adding rancher-cis-benchmark-crds - CRD chart for CIS v2
Adding rancher-cis-benchmark - Main chart for deploying cis-operator

Review comments and changes CRDs and adding the roles

Adding default ClusterScanProfiles in a Configmap

Updating kubernetes version to have major.minor.patch

Package the CRDs within the original chart and add package.yaml

chart changes for tolerations, crds, added
global.cattle.systemDefaultRegistry

Review changes to removed nodeSelector helper, combine all cis clusterroles in one file

CRD name change and adding keywords, moving package.yaml one folder upi
Renamed hardened benchmark
Move providesGVR to chart.yaml
2020-09-09 15:45:25 -07:00