Commit Graph

119 Commits (eeeceb0426afe1f1f9ee24ddda662008ca528227)

Author SHA1 Message Date
Rayan Das fb1097ce12 update kube-version annotation and bump chart version 2023-09-27 21:42:40 +05:30
Rayan Das 8d9d536a8f bump cis-benchmark chart version 2023-09-15 13:11:22 +05:30
Rayan Das 0dae32b4ba add maxKubernetesVersion for cis 1.23 benchmark for rke, rke2, and k3s 2023-09-15 13:00:02 +05:30
Rayan Das 8576a0d4db add cis 1.7 in configmap.yaml 2023-09-15 12:54:34 +05:30
Rayan Das f139d0b135 bump GKE to 1.2.0 2023-09-15 12:51:31 +05:30
Rayan Das 10497575b9 add CIS profiles for RKE RKE2 and K3s 2023-09-15 12:48:11 +05:30
Chirayu Kapoor cd4ee854fe
Bump kubectl to v1.28.1
Signed-off-by: Chirayu Kapoor <dev.csociety@gmail.com>
2023-09-14 01:20:39 +05:30
Chirayu Kapoor b6ddc03a8a
Bump security scan to v0.2.13
Signed-off-by: Chirayu Kapoor <dev.csociety@gmail.com>
2023-09-13 11:19:53 +05:30
Rayan Das 1f269e4fd3 added 1.27 support and bump chart version 2023-09-06 19:45:49 +05:30
Diogo Souza c75749a194 copy rancher-cis-benchmark version 102.x.x to 103.x.x 2023-08-14 17:59:12 -03:00
vardhaman 0929619d26 unrc CIS benchmark chart 2023-06-08 18:06:37 +05:30
Rayan Das be298c7cb9 bump security-scan version to v0.2.12-rc2 2023-05-23 19:26:02 +05:30
Rayan Das ae423ad879 updated kube-version annotaion to support K8s 1.26.x 2023-05-15 11:58:59 +05:30
Rayan Das 3bb4d1f718 bum cis-benchmark to include latest security-scan, cis-operator, kubectl and sonobuoy version 2023-05-11 11:44:25 +05:30
vardhaman 2b68ad24af unrc rancher-cis-benchmark chart 2023-04-05 10:35:04 +05:30
Rayan Das 8d65bd9ae9 updated RBAC to fix RKE1 hardened 5.7.4 and RKE2 hardened 5.2.2 an 5.2.8
tests and bumped security-scan tag
2023-03-15 19:24:08 +05:30
vardhaman 44e6e8e5e3 CIS: added network policy related permissions to cis-scan-ns clusterrole 2023-02-24 21:48:09 +05:30
Rayan Das fd5aaacdd1 bump CIS Benchmark version to include new security-scan image 2023-02-22 16:33:26 +05:30
Mauren Berti ce1769a6f0
make charts 2023-02-09 09:45:25 -05:00
Mauren Berti 79a977493b
Update PSP approach for rancher-cis-benchmark.
* Remove all previous capabilities checks.
* Bump version from 3.0.1-rc6 to 4.0.0-rc1.
* Add new flag global.cattle.psp.enabled to control installation of PodSecurityPolicies.
* Add new validate-psp-install.yaml file to check whether PSPs can be installed.
* Update app-readme.md with PSP notice.
* Bump Kubernetes compatibility versions to < 1.26.0.
2023-02-09 09:22:06 -05:00
vardhaman 0f5ef706c1 CIS: updated clusterrolebinding name
also removed the unnecessary hook for deleting role binding
2023-02-07 17:54:12 +05:30
vardhaman 332dc80f61 bump cis-operator and cis benchmark chart version 2023-02-01 10:47:14 +05:30
vardhaman 1e8345e71d added tolerations variable for security scan job 2023-02-01 10:28:52 +05:30
Rayan Das 56bb7b322f bump security-scan version, cis-operator, and chart version 2023-01-25 17:15:58 +05:30
Rayan Das 115a07afba bump cis-benchmark version and chart version 2023-01-12 13:40:10 +05:30
Rayan Das 6335f0ec97 add condition to check for PSP capability in rancher-cis-benchmark 2023-01-11 22:42:48 +05:30
Rayan Das 6432a683b4 bump security-scan and cis-operator to the latest rc version 2022-12-20 14:42:27 +05:30
Vaishnav Gaikwad 8edef0570a Update cis-operator imagePullPolicy 2022-12-15 19:59:13 +05:30
vardhaman 39a83006e9 CIS BENCHMARK: added debug env var for cis operator 2022-12-06 11:48:40 +05:30
vardhaman 11895ff5bd updating cis to non rc v3.0.0 2022-11-09 14:37:41 +05:30
galal-hussein 5f2f0ba3dc update security-scan image 2022-10-19 18:02:30 +02:00
galal-hussein 3d4a61d672 fix permissions for cis-serviceaccount 2022-10-18 22:59:53 +02:00
galal-hussein 7641784193 Add PSP for cis-benchmark 2022-10-14 21:06:23 +02:00
Rayan Das d6cf998f18 bump security-scan to v0.2.9-rc4 2022-10-14 09:55:16 +05:30
galal-hussein 3fc4b81e99 Add privielges to cis-operator-serviceaccount in cis-operator namespace 2022-10-14 02:05:27 +02:00
galal-hussein 9a8fbadde3 Add pre-hook for upgrade fix and add serviceaccounts rbac 2022-10-13 20:51:13 +02:00
galal-hussein e0c2133e61 Add RBAC roles for cis benchmark chart 2022-10-12 20:07:16 +02:00
mitulshah-suse b626fd44bc update images and version 2022-09-27 12:55:51 +05:30
mitulshah-suse 1852d11a41 update rc versions to point to latest 2022-09-23 14:11:28 +05:30
mitulshah-suse 60f61ebef4 update version in benchmark,remove 1.5 scanprofile 2022-09-16 09:56:33 +05:30
Prachi Damle 021216ca72 Updating CIS to non rc v2.1.0 2022-08-16 17:08:49 -07:00
Rayan Das 3e596d562f bump cis-benchmark version to 2.1.0-rc1 2022-08-16 11:18:33 +05:30
Rayan Das 9872219088 bump CIS Benchmark version and security-scan version 2022-07-22 18:28:01 +05:30
Rayan Das 4c194bf9f9 bump CIS Benchmark version and security-scan version 2022-07-22 12:26:36 +05:30
dhruvmewada15 324b47d504 Added cis-1.23 profiles for base CIS, rke1, rke2, k3s 2022-07-11 16:31:35 +05:30
dhruvmewada15 463e7431dd Added cis-1.20 profiles for base CIS, rke1, rke2, k3s 2022-07-11 16:22:15 +05:30
Vaishnav Gaikwad 5f29efd3f9 update annotations and sonobuoy version 2022-07-07 17:20:59 +05:30
Vaishnav Gaikwad 6929fe59ab Bump security-scan version
New security-scan image has the eks-version fix
2022-06-23 19:16:13 +05:30
Vaishnav Gaikwad ccc57dfdf4 make clusterName string 2022-06-14 09:32:19 +05:30
Prachi Damle 9ebfe30a74 Bump rancher-cis-benchmark to non-rc tag 2.0.4 2022-05-10 12:52:32 -07:00