Skip to content

Commit f28703a

Browse files
committed
Add CIS OpenShift v1.9.0 section 2
This section remains the same as version 1.7.0. Assisted-By: Claude Opus 4.6
1 parent 9644ce9 commit f28703a

1 file changed

Lines changed: 58 additions & 0 deletions

File tree

controls/cis_ocp_190/section-2.yml

Lines changed: 58 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,58 @@
1+
---
2+
controls:
3+
- id: '2'
4+
title: etcd
5+
status: pending
6+
rules: []
7+
controls:
8+
- id: '2.1'
9+
title: Ensure that the --cert-file and --key-file arguments are set as appropriate
10+
status: automated
11+
rules:
12+
- etcd_cert_file
13+
- etcd_key_file
14+
levels:
15+
- level_1
16+
- id: '2.2'
17+
title: Ensure that the --client-cert-auth argument is set to true
18+
status: automated
19+
rules:
20+
- etcd_client_cert_auth
21+
levels:
22+
- level_1
23+
- id: '2.3'
24+
title: Ensure that the --auto-tls argument is not set to true
25+
status: automated
26+
rules:
27+
- etcd_auto_tls
28+
levels:
29+
- level_1
30+
- id: '2.4'
31+
title: Ensure that the --peer-cert-file and --peer-key-file arguments are set as appropriate
32+
status: automated
33+
rules:
34+
- etcd_peer_cert_file
35+
- etcd_peer_key_file
36+
levels:
37+
- level_1
38+
- id: '2.5'
39+
title: Ensure that the --peer-client-cert-auth argument is set to true
40+
status: automated
41+
rules:
42+
- etcd_peer_client_cert_auth
43+
levels:
44+
- level_1
45+
- id: '2.6'
46+
title: Ensure that the --peer-auto-tls argument is not set to true
47+
status: automated
48+
rules:
49+
- etcd_peer_auto_tls
50+
levels:
51+
- level_1
52+
- id: '2.7'
53+
title: Ensure that a unique Certificate Authority is used for etcd
54+
status: automated
55+
rules:
56+
- etcd_unique_ca
57+
levels:
58+
- level_2

0 commit comments

Comments
 (0)