Rayan Das
fb1097ce12
update kube-version annotation and bump chart version
2023-09-27 21:42:40 +05:30
Rayan Das
8d9d536a8f
bump cis-benchmark chart version
2023-09-15 13:11:22 +05:30
Rayan Das
0dae32b4ba
add maxKubernetesVersion for cis 1.23 benchmark for rke, rke2, and k3s
2023-09-15 13:00:02 +05:30
Rayan Das
8576a0d4db
add cis 1.7 in configmap.yaml
2023-09-15 12:54:34 +05:30
Rayan Das
f139d0b135
bump GKE to 1.2.0
2023-09-15 12:51:31 +05:30
Rayan Das
10497575b9
add CIS profiles for RKE RKE2 and K3s
2023-09-15 12:48:11 +05:30
Chirayu Kapoor
cd4ee854fe
Bump kubectl to v1.28.1
...
Signed-off-by: Chirayu Kapoor <dev.csociety@gmail.com>
2023-09-14 01:20:39 +05:30
Chirayu Kapoor
b6ddc03a8a
Bump security scan to v0.2.13
...
Signed-off-by: Chirayu Kapoor <dev.csociety@gmail.com>
2023-09-13 11:19:53 +05:30
Rayan Das
1f269e4fd3
added 1.27 support and bump chart version
2023-09-06 19:45:49 +05:30
Diogo Souza
c75749a194
copy rancher-cis-benchmark version 102.x.x to 103.x.x
2023-08-14 17:59:12 -03:00
vardhaman
0929619d26
unrc CIS benchmark chart
2023-06-08 18:06:37 +05:30
Rayan Das
be298c7cb9
bump security-scan version to v0.2.12-rc2
2023-05-23 19:26:02 +05:30
Rayan Das
ae423ad879
updated kube-version annotaion to support K8s 1.26.x
2023-05-15 11:58:59 +05:30
Rayan Das
3bb4d1f718
bum cis-benchmark to include latest security-scan, cis-operator, kubectl and sonobuoy version
2023-05-11 11:44:25 +05:30
vardhaman
2b68ad24af
unrc rancher-cis-benchmark chart
2023-04-05 10:35:04 +05:30
Rayan Das
8d65bd9ae9
updated RBAC to fix RKE1 hardened 5.7.4 and RKE2 hardened 5.2.2 an 5.2.8
...
tests and bumped security-scan tag
2023-03-15 19:24:08 +05:30
vardhaman
44e6e8e5e3
CIS: added network policy related permissions to cis-scan-ns clusterrole
2023-02-24 21:48:09 +05:30
Rayan Das
fd5aaacdd1
bump CIS Benchmark version to include new security-scan image
2023-02-22 16:33:26 +05:30
Mauren Berti
ce1769a6f0
make charts
2023-02-09 09:45:25 -05:00
Mauren Berti
79a977493b
Update PSP approach for rancher-cis-benchmark.
...
* Remove all previous capabilities checks.
* Bump version from 3.0.1-rc6 to 4.0.0-rc1.
* Add new flag global.cattle.psp.enabled to control installation of PodSecurityPolicies.
* Add new validate-psp-install.yaml file to check whether PSPs can be installed.
* Update app-readme.md with PSP notice.
* Bump Kubernetes compatibility versions to < 1.26.0.
2023-02-09 09:22:06 -05:00
vardhaman
0f5ef706c1
CIS: updated clusterrolebinding name
...
also removed the unnecessary hook for deleting role binding
2023-02-07 17:54:12 +05:30
vardhaman
332dc80f61
bump cis-operator and cis benchmark chart version
2023-02-01 10:47:14 +05:30
vardhaman
1e8345e71d
added tolerations variable for security scan job
2023-02-01 10:28:52 +05:30
Rayan Das
56bb7b322f
bump security-scan version, cis-operator, and chart version
2023-01-25 17:15:58 +05:30
Rayan Das
115a07afba
bump cis-benchmark version and chart version
2023-01-12 13:40:10 +05:30
Rayan Das
6335f0ec97
add condition to check for PSP capability in rancher-cis-benchmark
2023-01-11 22:42:48 +05:30
Rayan Das
6432a683b4
bump security-scan and cis-operator to the latest rc version
2022-12-20 14:42:27 +05:30
Vaishnav Gaikwad
8edef0570a
Update cis-operator imagePullPolicy
2022-12-15 19:59:13 +05:30
vardhaman
39a83006e9
CIS BENCHMARK: added debug env var for cis operator
2022-12-06 11:48:40 +05:30
vardhaman
11895ff5bd
updating cis to non rc v3.0.0
2022-11-09 14:37:41 +05:30
galal-hussein
5f2f0ba3dc
update security-scan image
2022-10-19 18:02:30 +02:00
galal-hussein
3d4a61d672
fix permissions for cis-serviceaccount
2022-10-18 22:59:53 +02:00
galal-hussein
7641784193
Add PSP for cis-benchmark
2022-10-14 21:06:23 +02:00
Rayan Das
d6cf998f18
bump security-scan to v0.2.9-rc4
2022-10-14 09:55:16 +05:30
galal-hussein
3fc4b81e99
Add privielges to cis-operator-serviceaccount in cis-operator namespace
2022-10-14 02:05:27 +02:00
galal-hussein
9a8fbadde3
Add pre-hook for upgrade fix and add serviceaccounts rbac
2022-10-13 20:51:13 +02:00
galal-hussein
e0c2133e61
Add RBAC roles for cis benchmark chart
2022-10-12 20:07:16 +02:00
mitulshah-suse
b626fd44bc
update images and version
2022-09-27 12:55:51 +05:30
mitulshah-suse
1852d11a41
update rc versions to point to latest
2022-09-23 14:11:28 +05:30
mitulshah-suse
60f61ebef4
update version in benchmark,remove 1.5 scanprofile
2022-09-16 09:56:33 +05:30
Prachi Damle
021216ca72
Updating CIS to non rc v2.1.0
2022-08-16 17:08:49 -07:00
Rayan Das
3e596d562f
bump cis-benchmark version to 2.1.0-rc1
2022-08-16 11:18:33 +05:30
Rayan Das
9872219088
bump CIS Benchmark version and security-scan version
2022-07-22 18:28:01 +05:30
Rayan Das
4c194bf9f9
bump CIS Benchmark version and security-scan version
2022-07-22 12:26:36 +05:30
dhruvmewada15
324b47d504
Added cis-1.23 profiles for base CIS, rke1, rke2, k3s
2022-07-11 16:31:35 +05:30
dhruvmewada15
463e7431dd
Added cis-1.20 profiles for base CIS, rke1, rke2, k3s
2022-07-11 16:22:15 +05:30
Vaishnav Gaikwad
5f29efd3f9
update annotations and sonobuoy version
2022-07-07 17:20:59 +05:30
Vaishnav Gaikwad
6929fe59ab
Bump security-scan version
...
New security-scan image has the eks-version fix
2022-06-23 19:16:13 +05:30
Vaishnav Gaikwad
ccc57dfdf4
make clusterName string
2022-06-14 09:32:19 +05:30
Prachi Damle
9ebfe30a74
Bump rancher-cis-benchmark to non-rc tag 2.0.4
2022-05-10 12:52:32 -07:00