Update docs for cis hardening #802
Open
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Member
ktsakalozos
commented
Nov 15, 2024
ktsakalozos
commented
- update the CIS hardening how-to with CIS auditing section
- update the CIS reports generation tool to give us the format we want
- update the CIS hardening checks to include dqlite in place of etcd
- review the CIS hardening checks
|
Hi, looks like pyspelling job found some issues, you can check it here |
nhennigan
reviewed
Nov 15, 2024
| @@ -15,77 +22,31 @@ This guide assumes the following: | |||
| [getting-started-guide] guide) | |||
|
|
||
| ``` | ||
| sudo -E kube-bench --version ck8s-dqlite-cis-1.24 --config-dir ./kube-bench-ck8s-cfg/cfg/ --config ./kube-bench-ck8s-cfg/cfg/config.yaml | ||
| sudo -E kube-bench --version ck8s-cis-1.24 --config-dir ./kube-bench-ck8s-cfg/cfg/ --config ./kube-bench-ck8s-cfg/cfg/config.yaml |
There was a problem hiding this comment.
Tested with local setup and runs fine
docs/src/snap/howto/cis-hardening.md
Outdated
|
|
||
| ##### Control 1.1.1 | ||
|
|
||
| ###### Description: |
There was a problem hiding this comment.
Adding description, remediation, audit and expected output as h6 headers clutter the side navigation. Leaving Control x.x.x as h5 and then making the rest bold with text will make it tidier while still remaining the same visually.
ktsakalozos
force-pushed
the
update-docs-for-CIS-hardening
branch
from
e1460cd
to
d256e66
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.