Skip to content

Commit dcdb508

Browse files
committed
Add CIS OpenShift 1.9.0 profile and controls
CIS 1.9.0 benchmark has some minor differences from 1.7.0. Let's add some separate control files for 1.9.0 so we can make those changes without affecting 1.7.0. Assisted-By: Claude Opus 4.6
1 parent fbc1506 commit dcdb508

3 files changed

Lines changed: 13 additions & 2 deletions

File tree

controls/cis_ocp_190.yml

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,11 @@
1+
---
2+
policy: CIS Red Hat OpenShift Container Platform 4 Benchmark
3+
title: CIS Red Hat OpenShift Container Platform 4 Benchmark
4+
id: cis_ocp_190
5+
source: https://www.cisecurity.org/benchmark/kubernetes
6+
7+
levels:
8+
- id: level_1
9+
- id: level_2
10+
inherits_from:
11+
- level_1

products/ocp4/profiles/cis-1-9.profile

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -28,7 +28,7 @@ filter_rules: '"ocp4-node" not in platform and "ocp4-master-node" not in platfor
2828
not in platform and "ocp4-node-on-ovn" not in platform'
2929

3030
selections:
31-
- cis_ocp:all
31+
- cis_ocp_190:all
3232
### Variables
3333
- var_openshift_audit_profile=WriteRequestBodies
3434
### Helper Rules

products/ocp4/profiles/cis-node-1-9.profile

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -28,4 +28,4 @@ filter_rules: '"ocp4-node" in platform or "ocp4-master-node" in platform or "ocp
2828
or "ocp4-node-on-ovn" in platform'
2929

3030
selections:
31-
- cis_ocp:all
31+
- cis_ocp_190:all

0 commit comments

Comments
 (0)