forward-port rancher-cis-benchmark-crd 6.2.0

charts/rancher-cis-benchmark-crd/6.2.0/Chart.yaml

@@ -0,0 +1,10 @@
+annotations:
+ catalog.cattle.io/certified: rancher
+ catalog.cattle.io/hidden: "true"
+ catalog.cattle.io/namespace: cis-operator-system
+ catalog.cattle.io/release-name: rancher-cis-benchmark-crd
+apiVersion: v1
+description: Installs the CRDs for rancher-cis-benchmark.
+name: rancher-cis-benchmark-crd
+type: application
+version: 6.2.0

charts/rancher-cis-benchmark-crd/6.2.0/README.md

@@ -0,0 +1,2 @@
+# rancher-cis-benchmark-crd
+A Rancher chart that installs the CRDs used by rancher-cis-benchmark.

charts/rancher-cis-benchmark-crd/6.2.0/templates/clusterscan.yaml

@@ -0,0 +1,149 @@
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+ name: clusterscans.cis.cattle.io
+spec:
+ group: cis.cattle.io
+ names:
+ kind: ClusterScan
+ plural: clusterscans
+ singular: clusterscan
+ scope: Cluster
+ versions:
+ - additionalPrinterColumns:
+ - jsonPath: .status.lastRunScanProfileName
+ name: ClusterScanProfile
+ type: string
+ - jsonPath: .status.summary.total
+ name: Total
+ type: string
+ - jsonPath: .status.summary.pass
+ name: Pass
+ type: string
+ - jsonPath: .status.summary.fail
+ name: Fail
+ type: string
+ - jsonPath: .status.summary.skip
+ name: Skip
+ type: string
+ - jsonPath: .status.summary.warn
+ name: Warn
+ type: string
+ - jsonPath: .status.summary.notApplicable
+ name: Not Applicable
+ type: string
+ - jsonPath: .status.lastRunTimestamp
+ name: LastRunTimestamp
+ type: string
+ - jsonPath: .spec.scheduledScanConfig.cronSchedule
+ name: CronSchedule
+ type: string
+ name: v1
+ schema:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ scanProfileName:
+ nullable: true
+ type: string
+ scheduledScanConfig:
+ nullable: true
+ properties:
+ cronSchedule:
+ nullable: true
+ type: string
+ retentionCount:
+ type: integer
+ scanAlertRule:
+ nullable: true
+ properties:
+ alertOnComplete:
+ type: boolean
+ alertOnFailure:
+ type: boolean
+ type: object
+ type: object
+ scoreWarning:
+ enum:
+ - pass
+ - fail
+ nullable: true
+ type: string
+ type: object
+ status:
+ properties:
+ NextScanAt:
+ nullable: true
+ type: string
+ ScanAlertingRuleName:
+ nullable: true
+ type: string
+ conditions:
+ items:
+ properties:
+ lastTransitionTime:
+ nullable: true
+ type: string
+ lastUpdateTime:
+ nullable: true
+ type: string
+ message:
+ nullable: true
+ type: string
+ reason:
+ nullable: true
+ type: string
+ status:
+ nullable: true
+ type: string
+ type:
+ nullable: true
+ type: string
+ type: object
+ nullable: true
+ type: array
+ display:
+ nullable: true
+ properties:
+ error:
+ type: boolean
+ message:
+ nullable: true
+ type: string
+ state:
+ nullable: true
+ type: string
+ transitioning:
+ type: boolean
+ type: object
+ lastRunScanProfileName:
+ nullable: true
+ type: string
+ lastRunTimestamp:
+ nullable: true
+ type: string
+ observedGeneration:
+ type: integer
+ summary:
+ nullable: true
+ properties:
+ fail:
+ type: integer
+ notApplicable:
+ type: integer
+ pass:
+ type: integer
+ skip:
+ type: integer
+ total:
+ type: integer
+ warn:
+ type: integer
+ type: object
+ type: object
+ type: object
+ served: true
+ storage: true
+ subresources:
+ status: {}

charts/rancher-cis-benchmark-crd/6.2.0/templates/clusterscanbenchmark.yaml

@@ -0,0 +1,55 @@
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+ name: clusterscanbenchmarks.cis.cattle.io
+spec:
+ group: cis.cattle.io
+ names:
+ kind: ClusterScanBenchmark
+ plural: clusterscanbenchmarks
+ singular: clusterscanbenchmark
+ scope: Cluster
+ versions:
+ - additionalPrinterColumns:
+ - jsonPath: .spec.clusterProvider
+ name: ClusterProvider
+ type: string
+ - jsonPath: .spec.minKubernetesVersion
+ name: MinKubernetesVersion
+ type: string
+ - jsonPath: .spec.maxKubernetesVersion
+ name: MaxKubernetesVersion
+ type: string
+ - jsonPath: .spec.customBenchmarkConfigMapName
+ name: customBenchmarkConfigMapName
+ type: string
+ - jsonPath: .spec.customBenchmarkConfigMapNamespace
+ name: customBenchmarkConfigMapNamespace
+ type: string
+ name: v1
+ schema:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ clusterProvider:
+ nullable: true
+ type: string
+ customBenchmarkConfigMapName:
+ nullable: true
+ type: string
+ customBenchmarkConfigMapNamespace:
+ nullable: true
+ type: string
+ maxKubernetesVersion:
+ nullable: true
+ type: string
+ minKubernetesVersion:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ served: true
+ storage: true
+ subresources:
+ status: {}

charts/rancher-cis-benchmark-crd/6.2.0/templates/clusterscanprofile.yaml

@@ -0,0 +1,37 @@
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+ name: clusterscanprofiles.cis.cattle.io
+spec:
+ group: cis.cattle.io
+ names:
+ kind: ClusterScanProfile
+ plural: clusterscanprofiles
+ singular: clusterscanprofile
+ scope: Cluster
+ versions:
+ - additionalPrinterColumns:
+ - jsonPath: .spec.benchmarkVersion
+ name: BenchmarkVersion
+ type: string
+ name: v1
+ schema:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ benchmarkVersion:
+ nullable: true
+ type: string
+ skipTests:
+ items:
+ nullable: true
+ type: string
+ nullable: true
+ type: array
+ type: object
+ type: object
+ served: true
+ storage: true
+ subresources:
+ status: {}

charts/rancher-cis-benchmark-crd/6.2.0/templates/clusterscanreport.yaml

@@ -0,0 +1,40 @@
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+ name: clusterscanreports.cis.cattle.io
+spec:
+ group: cis.cattle.io
+ names:
+ kind: ClusterScanReport
+ plural: clusterscanreports
+ singular: clusterscanreport
+ scope: Cluster
+ versions:
+ - additionalPrinterColumns:
+ - jsonPath: .spec.lastRunTimestamp
+ name: LastRunTimestamp
+ type: string
+ - jsonPath: .spec.benchmarkVersion
+ name: BenchmarkVersion
+ type: string
+ name: v1
+ schema:
+ openAPIV3Schema:
+ properties:
+ spec:
+ properties:
+ benchmarkVersion:
+ nullable: true
+ type: string
+ lastRunTimestamp:
+ nullable: true
+ type: string
+ reportJSON:
+ nullable: true
+ type: string
+ type: object
+ type: object
+ served: true
+ storage: true
+ subresources:
+ status: {}

index.yaml

@@ -8087,6 +8087,20 @@ entries:
  - assets/rancher-cis-benchmark/rancher-cis-benchmark-2.0.0.tgz
  version: 2.0.0
  rancher-cis-benchmark-crd:
+ - annotations:
+ catalog.cattle.io/certified: rancher
+ catalog.cattle.io/hidden: "true"
+ catalog.cattle.io/namespace: cis-operator-system
+ catalog.cattle.io/release-name: rancher-cis-benchmark-crd
+ apiVersion: v1
+ created: "2024-10-10T17:52:57.790321597-03:00"
+ description: Installs the CRDs for rancher-cis-benchmark.
+ digest: 03447cacc5937b5c533a0aacf844157e4eb33e5b16077e6877dc338284fbfc17
+ name: rancher-cis-benchmark-crd
+ type: application
+ urls:
+ - assets/rancher-cis-benchmark-crd/rancher-cis-benchmark-crd-6.2.0.tgz
+ version: 6.2.0
  - annotations:
  catalog.cattle.io/certified: rancher
  catalog.cattle.io/hidden: "true"

release.yaml

@@ -7,3 +7,48 @@ rancher-cis-benchmark-crd:
  - 5.3.0
  - 5.4.0
  - 6.1.0
+ - 6.2.0
+fleet:
+ - 105.0.0+up0.10.4-rc.1
+fleet-agent:
+ - 105.0.0+up0.10.4-rc.1
+fleet-crd:
+ - 105.0.0+up0.10.4-rc.1
+prometheus-federator:
+ - 105.0.0-rc.1+up0.4.2
+rancher-aks-operator:
+ - 105.0.0+up1.10.0-rc.1
+rancher-aks-operator-crd:
+ - 105.0.0+up1.10.0-rc.1
+rancher-alerting-drivers:
+ - 105.0.0-rc.1
+rancher-backup:
+ - 105.0.0+up6.0.0-rc.2
+rancher-backup-crd:
+ - 105.0.0+up6.0.0-rc.2
+rancher-eks-operator:
+ - 105.0.0+up1.10.0-rc.1
+rancher-eks-operator-crd:
+ - 105.0.0+up1.10.0-rc.1
+rancher-gke-operator:
+ - 105.0.0+up1.10.0-rc.1
+rancher-gke-operator-crd:
+ - 105.0.0+up1.10.0-rc.1
+rancher-logging:
+ - 105.0.0-rc.1+up4.8.0
+rancher-logging-crd:
+ - 105.0.0-rc.1+up4.8.0
+rancher-monitoring:
+ - 105.0.0+up57.0.3
+ - 105.1.0-rc.1+up61.3.2
+rancher-monitoring-crd:
+ - 105.0.0+up57.0.3
+ - 105.1.0-rc.1+up61.3.2
+rancher-provisioning-capi:
+ - 105.0.0+up0.4.0
+rancher-vsphere-cpi:
+ - 104.0.1+up1.8.1
+rancher-vsphere-csi:
+ - 104.0.1+up3.3.0-rancher2
+rancher-webhook:
+ - 105.0.0+up0.6.1-rc.5