Skip to content

Commit fbc1506

Browse files
committed
Bump CIS OpenShift version from 1.7.0 to 1.9.0
Version 1.9.0 was released last month. Let's update the profile to match the latest version. Assisted-By: Claude Opus 4.6
1 parent 88d27c6 commit fbc1506

6 files changed

Lines changed: 78 additions & 6 deletions

File tree

products/ocp4/profiles/cis-1-7.profile

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -5,6 +5,8 @@ title: 'CIS Red Hat OpenShift Container Platform 4 Benchmark'
55

66
platform: ocp4
77

8+
status: deprecated
9+
810
metadata:
911
SMEs:
1012
- rhmdnd
Lines changed: 37 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,37 @@
1+
---
2+
documentation_complete: true
3+
4+
title: 'CIS Red Hat OpenShift Container Platform 4 Benchmark'
5+
6+
platform: ocp4
7+
8+
metadata:
9+
SMEs:
10+
- rhmdnd
11+
- Vincent056
12+
- yuumasato
13+
version: 1.9.0
14+
15+
description: |-
16+
This profile defines a baseline that aligns to the Center for Internet Security®
17+
Red Hat OpenShift Container Platform 4 Benchmark™, V1.9.0.
18+
19+
This profile includes Center for Internet Security®
20+
Red Hat OpenShift Container Platform 4 CIS Benchmarks™ content.
21+
22+
Note that this part of the profile is meant to run on the Platform that
23+
Red Hat OpenShift Container Platform 4 runs on top of.
24+
25+
This profile is applicable to OpenShift versions 4.12 and greater.
26+
27+
filter_rules: '"ocp4-node" not in platform and "ocp4-master-node" not in platform and "ocp4-node-on-sdn"
28+
not in platform and "ocp4-node-on-ovn" not in platform'
29+
30+
selections:
31+
- cis_ocp:all
32+
### Variables
33+
- var_openshift_audit_profile=WriteRequestBodies
34+
### Helper Rules
35+
### This is a helper rule to fetch the required api resource for detecting OCP version
36+
- version_detect_in_ocp
37+
- version_detect_in_hypershift

products/ocp4/profiles/cis-node-1-7.profile

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -5,6 +5,8 @@ title: 'CIS Red Hat OpenShift Container Platform 4 Benchmark'
55

66
platform: ocp4-node
77

8+
status: deprecated
9+
810
metadata:
911
SMEs:
1012
- rhmdnd
Lines changed: 31 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,31 @@
1+
---
2+
documentation_complete: true
3+
4+
title: 'CIS Red Hat OpenShift Container Platform 4 Benchmark'
5+
6+
platform: ocp4-node
7+
8+
metadata:
9+
SMEs:
10+
- rhmdnd
11+
- Vincent056
12+
- yuumasato
13+
version: 1.9.0
14+
15+
description: |-
16+
This profile defines a baseline that aligns to the Center for Internet Security®
17+
Red Hat OpenShift Container Platform 4 Benchmark™, V1.9.0.
18+
19+
This profile includes Center for Internet Security®
20+
Red Hat OpenShift Container Platform 4 CIS Benchmarks™ content.
21+
22+
Note that this part of the profile is meant to run on the Operating System that
23+
Red Hat OpenShift Container Platform 4 runs on top of.
24+
25+
This profile is applicable to OpenShift versions 4.12 and greater.
26+
27+
filter_rules: '"ocp4-node" in platform or "ocp4-master-node" in platform or "ocp4-node-on-sdn" in platform
28+
or "ocp4-node-on-ovn" in platform'
29+
30+
selections:
31+
- cis_ocp:all

products/ocp4/profiles/cis-node.profile

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -10,11 +10,11 @@ metadata:
1010
- rhmdnd
1111
- Vincent056
1212
- yuumasato
13-
version: 1.7.0
13+
version: 1.9.0
1414

1515
description: |-
1616
This profile defines a baseline that aligns to the Center for Internet Security®
17-
Red Hat OpenShift Container Platform 4 Benchmark™, V1.7.
17+
Red Hat OpenShift Container Platform 4 Benchmark™, V1.9.0.
1818

1919
This profile includes Center for Internet Security®
2020
Red Hat OpenShift Container Platform 4 CIS Benchmarks™ content.
@@ -24,4 +24,4 @@ description: |-
2424

2525
This profile is applicable to OpenShift versions 4.12 and greater.
2626

27-
extends: cis-node-1-7
27+
extends: cis-node-1-9

products/ocp4/profiles/cis.profile

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -10,11 +10,11 @@ metadata:
1010
- rhmdnd
1111
- Vincent056
1212
- yuumasato
13-
version: 1.7.0
13+
version: 1.9.0
1414

1515
description: |-
1616
This profile defines a baseline that aligns to the Center for Internet Security®
17-
Red Hat OpenShift Container Platform 4 Benchmark™, V1.7.
17+
Red Hat OpenShift Container Platform 4 Benchmark™, V1.9.0.
1818

1919
This profile includes Center for Internet Security®
2020
Red Hat OpenShift Container Platform 4 CIS Benchmarks™ content.
@@ -24,4 +24,4 @@ description: |-
2424

2525
This profile is applicable to OpenShift versions 4.12 and greater.
2626

27-
extends: cis-1-7
27+
extends: cis-1-9

0 commit comments

Comments
 (0)