Files
homelab/components/compliance-operator/overlays/cis-compliance/ocp-cis-node-tailored-profile.yaml
rblundon fe564d7227 Squashed 'cluster-config/' content from commit 654f2390
git-subtree-dir: cluster-config
git-subtree-split: 654f23903bd1f9a27a4810bd289d165b6cfdbb0c
2025-03-30 15:46:16 -05:00

19 lines
605 B
YAML

apiVersion: compliance.openshift.io/v1alpha1
kind: TailoredProfile
metadata:
name: ocp4-cis-node-lab
annotations:
argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true
argocd.argoproj.io/sync-wave: "1"
spec:
extends: ocp4-cis-node
description: Lab CIS node profile
title: Lab CIS node profile
disableRules:
- name: ocp4-file-permissions-etcd-data-dir
rationale: Default value of `drwxr-xr-x.` is fine
- name: ocp4-kubelet-enable-protect-kernel-defaults
rationale: Not applicable
- name: ocp4-kubelet-enable-protect-kernel-sysctl
rationale: Not applicable