Add support for RKE2 v1.27 and v.28, update XCCDF for other versions (#…

…197) * AUTOMATION: SSF Prod Chart Update for stigatron * AUTOMATION: SSF Prod Chart Update for stigatron * Add support for RKE2 v1.27 and v.28, update XCCDF for other versions (#195) * Add support for RKE2 v1.27 and v.28, update XCCDF for other versions * Enabled 1.29 * Update img/app/chart versions for stigatron --------- Signed-off-by: Adam Martin <[email protected]> Co-authored-by: Adam Martin <[email protected]> --------- Signed-off-by: Adam Martin <[email protected]> Co-authored-by: Carbide SSF <[email protected]> Co-authored-by: Adam Toy <[email protected]>
rancherfederal · Jul 8, 2024 · 55c3e0a · 55c3e0a
1 parent c6f3343
commit 55c3e0a
Show file tree

Hide file tree

Showing 20 changed files with 3,850 additions and 4 deletions.
diff --git a/charts/stigatron/Chart.yaml b/charts/stigatron/Chart.yaml
@@ -2,8 +2,8 @@ apiVersion: v2
 name: stigatron
 description: Rancher Government Stigatron Extension
 icon: https://raw.githubusercontent.com/rancherfederal/carbide-docs/main/static/img/carbide-logo.svg
-version: "0.2.5"
-appVersion: "0.2.2"
+version: "0.3.0"
+appVersion: "0.3.0"
 dependencies:
   - name: heimdall2
     version: "0.1.41"

diff --git a/charts/stigatron/templates/benchmarks/rke2/DISA_Preview/1.27/clusterscanbenchmark.yaml b/charts/stigatron/templates/benchmarks/rke2/DISA_Preview/1.27/clusterscanbenchmark.yaml
@@ -0,0 +1,12 @@
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanBenchmark
+metadata:
+  name: rke2-stig-1.27-preview
+  annotations:
+    field.cattle.io/description: RKE2 1.27 STIG Profile
+spec:
+  clusterProvider: rke2
+  customBenchmarkConfigMapName: rke2-stig-1.27-preview
+  customBenchmarkConfigMapNamespace: cis-operator-system
+  minKubernetesVersion: "1.27.0"
+  maxKubernetesVersion: "1.27.30"
diff --git a/charts/stigatron/templates/benchmarks/rke2/DISA_Preview/1.27/clusterscanprofile.yaml b/charts/stigatron/templates/benchmarks/rke2/DISA_Preview/1.27/clusterscanprofile.yaml
@@ -0,0 +1,9 @@
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanProfile
+metadata:
+  name: rke2-stig-1.27-preview-profile
+  annotations:
+    compliance.cattle.io/stigatron-enabled: "true"
+spec:
+  benchmarkVersion: rke2-stig-1.27-preview
+  skipTests: []