Commit Graph

85 Commits (d7b29ff67499d9d1bdd1aee6c96809bb997788b1)

Author SHA1 Message Date
Chirayu Kapoor cd4ee854fe
Bump kubectl to v1.28.1
Signed-off-by: Chirayu Kapoor <dev.csociety@gmail.com>
2023-09-14 01:20:39 +05:30
Chirayu Kapoor b6ddc03a8a
Bump security scan to v0.2.13
Signed-off-by: Chirayu Kapoor <dev.csociety@gmail.com>
2023-09-13 11:19:53 +05:30
vardhaman 0929619d26 unrc CIS benchmark chart 2023-06-08 18:06:37 +05:30
Rayan Das be298c7cb9 bump security-scan version to v0.2.12-rc2 2023-05-23 19:26:02 +05:30
Rayan Das 3bb4d1f718 bum cis-benchmark to include latest security-scan, cis-operator, kubectl and sonobuoy version 2023-05-11 11:44:25 +05:30
vardhaman 2b68ad24af unrc rancher-cis-benchmark chart 2023-04-05 10:35:04 +05:30
Rayan Das 8d65bd9ae9 updated RBAC to fix RKE1 hardened 5.7.4 and RKE2 hardened 5.2.2 an 5.2.8
tests and bumped security-scan tag
2023-03-15 19:24:08 +05:30
Rayan Das fd5aaacdd1 bump CIS Benchmark version to include new security-scan image 2023-02-22 16:33:26 +05:30
Mauren Berti 79a977493b
Update PSP approach for rancher-cis-benchmark.
* Remove all previous capabilities checks.
* Bump version from 3.0.1-rc6 to 4.0.0-rc1.
* Add new flag global.cattle.psp.enabled to control installation of PodSecurityPolicies.
* Add new validate-psp-install.yaml file to check whether PSPs can be installed.
* Update app-readme.md with PSP notice.
* Bump Kubernetes compatibility versions to < 1.26.0.
2023-02-09 09:22:06 -05:00
vardhaman 332dc80f61 bump cis-operator and cis benchmark chart version 2023-02-01 10:47:14 +05:30
vardhaman 1e8345e71d added tolerations variable for security scan job 2023-02-01 10:28:52 +05:30
Rayan Das 56bb7b322f bump security-scan version, cis-operator, and chart version 2023-01-25 17:15:58 +05:30
Rayan Das 115a07afba bump cis-benchmark version and chart version 2023-01-12 13:40:10 +05:30
Rayan Das 6432a683b4 bump security-scan and cis-operator to the latest rc version 2022-12-20 14:42:27 +05:30
Vaishnav Gaikwad 8edef0570a Update cis-operator imagePullPolicy 2022-12-15 19:59:13 +05:30
vardhaman 39a83006e9 CIS BENCHMARK: added debug env var for cis operator 2022-12-06 11:48:40 +05:30
vardhaman 11895ff5bd updating cis to non rc v3.0.0 2022-11-09 14:37:41 +05:30
galal-hussein 5f2f0ba3dc update security-scan image 2022-10-19 18:02:30 +02:00
galal-hussein 3d4a61d672 fix permissions for cis-serviceaccount 2022-10-18 22:59:53 +02:00
Rayan Das d6cf998f18 bump security-scan to v0.2.9-rc4 2022-10-14 09:55:16 +05:30
mitulshah-suse b626fd44bc update images and version 2022-09-27 12:55:51 +05:30
mitulshah-suse 1852d11a41 update rc versions to point to latest 2022-09-23 14:11:28 +05:30
mitulshah-suse 60f61ebef4 update version in benchmark,remove 1.5 scanprofile 2022-09-16 09:56:33 +05:30
Prachi Damle 021216ca72 Updating CIS to non rc v2.1.0 2022-08-16 17:08:49 -07:00
Rayan Das 9872219088 bump CIS Benchmark version and security-scan version 2022-07-22 18:28:01 +05:30
Rayan Das 4c194bf9f9 bump CIS Benchmark version and security-scan version 2022-07-22 12:26:36 +05:30
dhruvmewada15 324b47d504 Added cis-1.23 profiles for base CIS, rke1, rke2, k3s 2022-07-11 16:31:35 +05:30
Vaishnav Gaikwad 5f29efd3f9 update annotations and sonobuoy version 2022-07-07 17:20:59 +05:30
Vaishnav Gaikwad 6929fe59ab Bump security-scan version
New security-scan image has the eks-version fix
2022-06-23 19:16:13 +05:30
Prachi Damle 9ebfe30a74 Bump rancher-cis-benchmark to non-rc tag 2.0.4 2022-05-10 12:52:32 -07:00
dhruvmewada15 1b52817c1c Update chart version and security-scan and cis-operator latest version 2022-05-03 14:06:15 +05:30
Prachi Damle 8ee909e723 Bump rancher-cis-benchmark to v2.0.3 2022-03-28 16:47:29 -07:00
Arvind Iyengar 5bf902b453
Fix rancher-cis-benchmark nodeSelector and tolerations 2022-03-18 13:58:09 -07:00
dhruvmewada15 e6bd990363 Update rancher/security-scan image rc tag 2022-03-03 23:43:56 +05:30
Luther Monson be5a59aeac add permits-os to all charts that needed it 2022-03-02 17:11:40 -07:00
dhruvmewada15 b0bc7a03ba Add AKS CIS Scan benchmark config 2022-02-15 23:04:00 +05:30
Jacob Payne c1c66abfb9
(dev-v2.6-archive) rancher security scan v0.2.5
(partially cherry picked from commit 3fb8e00a9b)
2022-01-06 11:38:18 -08:00
Colleen Murphy 68ad619fa3
(dev-v2.6-archive) Merge pull request #1625 from cmurphy/bump-kev2
Bump KEv2 operators

(partially cherry picked from commit 64f6c291de)
2022-01-06 11:37:43 -08:00
Jiaqi Luo 5f1dde5a21
(dev-v2.6-archive) [rancher-monitoring-crd] code refactor
(partially cherry picked from commit cfc2433953)
2022-01-06 11:37:42 -08:00
Colleen Murphy 7f2f418b2c
(dev-v2.6-archive) Bump external-ip-webhook
(partially cherry picked from commit c585a233bc)
2022-01-06 11:37:41 -08:00
Colleen Murphy c14b85702d
(dev-v2.6-archive) Bump KEv2 operators
(partially cherry picked from commit b4893deb99)
2022-01-06 11:37:41 -08:00
Jacob Payne 495146a31e
(dev-v2.6-archive) bump cis scan
(partially cherry picked from commit 4874c5074c)
2022-01-06 11:37:40 -08:00
Jacob Payne 5c2f00eb50
(dev-v2.6-archive) bumped cis security-scan image
(partially cherry picked from commit 1ce9eafc58)
2022-01-06 11:37:02 -08:00
Caleb Bron 74b165ae5e
(dev-v2.6-archive) Merge pull request #1519 from brendarearden/istio-spoof
[2.6.1 Blocker] Add new istio 1.10.4 image for airgap support

(partially cherry picked from commit fa87263e28)
2022-01-06 11:36:45 -08:00
Brenda Rearden 6fab596641
(dev-v2.6-archive) Update istio-installer image, add debug values
(partially cherry picked from commit 0ec6ab4350)
2022-01-06 11:36:45 -08:00
Jacob Payne bd41c98ad8
(dev-v2.6-archive) bumping cis images
(partially cherry picked from commit 57dfa397bc)
2022-01-06 11:36:40 -08:00
Brenda Rearden cdb170524a
(dev-v2.6-archive) Merge pull request #1485 from brendarearden/istio-spoof
Update istio to work with new nginx spoof image

(partially cherry picked from commit 0c73d6cae8)
2022-01-06 11:36:27 -08:00
Brenda Rearden 09db75dea7
(dev-v2.6-archive) Add airgap support for istio
(partially cherry picked from commit 1e76bf2397)
2022-01-06 11:36:26 -08:00
Jacob Payne b1f0d42a3c
(dev-v2.6-archive) updated security scan image
(partially cherry picked from commit 530ef81254)
2022-01-06 11:36:23 -08:00
Brenda Rearden ba64b29462
(dev-v2.6-archive) Add deprecation migration steps to readme, refactored app-readme
(partially cherry picked from commit b9477145b2)
2022-01-06 11:36:20 -08:00