19 lines
605 B
YAML
19 lines
605 B
YAML
apiVersion: compliance.openshift.io/v1alpha1
|
|
kind: TailoredProfile
|
|
metadata:
|
|
name: ocp4-cis-node-lab
|
|
annotations:
|
|
argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true
|
|
argocd.argoproj.io/sync-wave: "1"
|
|
spec:
|
|
extends: ocp4-cis-node
|
|
description: Lab CIS node profile
|
|
title: Lab CIS node profile
|
|
disableRules:
|
|
- name: ocp4-file-permissions-etcd-data-dir
|
|
rationale: Default value of `drwxr-xr-x.` is fine
|
|
- name: ocp4-kubelet-enable-protect-kernel-defaults
|
|
rationale: Not applicable
|
|
- name: ocp4-kubelet-enable-protect-kernel-sysctl
|
|
rationale: Not applicable
|