From 23d6ec9a621b3937ade00372e5b30c7ae175b4d9 Mon Sep 17 00:00:00 2001 From: Jonathan Crowther Date: Mon, 14 Aug 2023 12:31:15 -0400 Subject: [PATCH] Rename rke2 hardening guide (#770) * Update title * Update sidebar * versioned page + redirect * Update rke2-self-assessment-guide-with-cis-v1.7-k8s-v1.25.md title update * Fix references to CIS scan in body --------- Co-authored-by: martyav Co-authored-by: Marty Hernandez Avedon --- ...rke2-self-assessment-guide-with-cis-v1.7-k8s-v1.25.md} | 6 +++--- docusaurus.config.js | 8 ++++++++ sidebars.js | 2 +- ...rke2-self-assessment-guide-with-cis-v1.7-k8s-v1.25.md} | 6 +++--- versioned_sidebars/version-2.7-sidebars.json | 2 +- 5 files changed, 16 insertions(+), 8 deletions(-) rename docs/reference-guides/rancher-security/hardening-guides/rke2-hardening-guide/{rke2-self-assessment-guide-with-cis-v1.23-k8s-v1.25.md => rke2-self-assessment-guide-with-cis-v1.7-k8s-v1.25.md} (99%) rename versioned_docs/version-2.7/reference-guides/rancher-security/hardening-guides/rke2-hardening-guide/{rke2-self-assessment-guide-with-cis-v1.23-k8s-v1.25.md => rke2-self-assessment-guide-with-cis-v1.7-k8s-v1.25.md} (99%) diff --git a/docs/reference-guides/rancher-security/hardening-guides/rke2-hardening-guide/rke2-self-assessment-guide-with-cis-v1.23-k8s-v1.25.md b/docs/reference-guides/rancher-security/hardening-guides/rke2-hardening-guide/rke2-self-assessment-guide-with-cis-v1.7-k8s-v1.25.md similarity index 99% rename from docs/reference-guides/rancher-security/hardening-guides/rke2-hardening-guide/rke2-self-assessment-guide-with-cis-v1.23-k8s-v1.25.md rename to docs/reference-guides/rancher-security/hardening-guides/rke2-hardening-guide/rke2-self-assessment-guide-with-cis-v1.7-k8s-v1.25.md index 4d524d3fab4..252accbb79d 100644 --- a/docs/reference-guides/rancher-security/hardening-guides/rke2-hardening-guide/rke2-self-assessment-guide-with-cis-v1.23-k8s-v1.25.md +++ b/docs/reference-guides/rancher-security/hardening-guides/rke2-hardening-guide/rke2-self-assessment-guide-with-cis-v1.7-k8s-v1.25.md @@ -1,5 +1,5 @@ --- -title: RKE2 Self-Assessment Guide - CIS Benchmark v1.23 - K8s v1.25 +title: RKE2 Self-Assessment Guide - CIS Benchmark v1.7 - K8s v1.25 --- This document is a companion to the [RKE2 Hardening Guide](../../../../pages-for-subheaders/rke2-hardening-guide.md), which provides prescriptive guidance on how to harden RKE2 clusters that are running in production and managed by Rancher. This benchmark guide helps you evaluate the security of a hardened cluster against each control in the CIS Kubernetes Benchmark. @@ -8,13 +8,13 @@ This guide corresponds to the following versions of Rancher, CIS Benchmarks, and | Rancher Version | CIS Benchmark Version | Kubernetes Version | |-----------------|-----------------------|--------------------| -| Rancher v2.7 | Benchmark v1.23 | Kubernetes v1.25 | +| Rancher v2.7 | Benchmark v1.7 | Kubernetes v1.25 | This guide walks through the various controls and provide updated example commands to audit compliance in Rancher created clusters. Because Rancher and RKE2 install Kubernetes services as Docker containers, many of the control verification checks in the CIS Kubernetes Benchmark don't apply. These checks will return a result of `Not Applicable`. This document is for Rancher operators, security teams, auditors and decision makers. -For more information about each control, including detailed descriptions and remediations for failing tests, refer to the corresponding section of the CIS Kubernetes Benchmark v1.23. You can download the benchmark, after creating a free account, at [Center for Internet Security (CIS)](https://www.cisecurity.org/benchmark/kubernetes/). +For more information about each control, including detailed descriptions and remediations for failing tests, refer to the corresponding section of the CIS Kubernetes Benchmark v1.7. You can download the benchmark, after creating a free account, at [Center for Internet Security (CIS)](https://www.cisecurity.org/benchmark/kubernetes/). ## Testing Methodology diff --git a/docusaurus.config.js b/docusaurus.config.js index 110fd1e675f..56e1bfcf5b8 100644 --- a/docusaurus.config.js +++ b/docusaurus.config.js @@ -1142,6 +1142,14 @@ module.exports = { to: '/v2.6/integrations-in-rancher/opa-gatekeeper', from: '/v2.6/explanations/integrations-in-rancher/opa-gatekeeper' }, // Redirects for restructure from PR #234 (end) + { + to: "/reference-guides/rancher-security/hardening-guides/rke2-hardening-guide/rke2-self-assessment-guide-with-cis-v1.7-k8s-v1.25", + from: "/reference-guides/rancher-security/hardening-guides/rke2-hardening-guide/rke2-self-assessment-guide-with-cis-v1.23-k8s-v1.25" + }, + { + to: "/v2.7/reference-guides/rancher-security/hardening-guides/rke2-hardening-guide/rke2-self-assessment-guide-with-cis-v1.7-k8s-v1.25", + from: "/v2.7/reference-guides/rancher-security/hardening-guides/rke2-hardening-guide/rke2-self-assessment-guide-with-cis-v1.23-k8s-v1.25" + }, ], }, ], diff --git a/sidebars.js b/sidebars.js index ac360bef29b..985e5b67a26 100644 --- a/sidebars.js +++ b/sidebars.js @@ -1082,7 +1082,7 @@ const sidebars = { items: [ "reference-guides/rancher-security/hardening-guides/rke2-hardening-guide/rke2-self-assessment-guide-with-cis-v1.23-k8s-v1.23", "reference-guides/rancher-security/hardening-guides/rke2-hardening-guide/rke2-self-assessment-guide-with-cis-v1.23-k8s-v1.24", - "reference-guides/rancher-security/hardening-guides/rke2-hardening-guide/rke2-self-assessment-guide-with-cis-v1.23-k8s-v1.25", + "reference-guides/rancher-security/hardening-guides/rke2-hardening-guide/rke2-self-assessment-guide-with-cis-v1.7-k8s-v1.25", ], }, { diff --git a/versioned_docs/version-2.7/reference-guides/rancher-security/hardening-guides/rke2-hardening-guide/rke2-self-assessment-guide-with-cis-v1.23-k8s-v1.25.md b/versioned_docs/version-2.7/reference-guides/rancher-security/hardening-guides/rke2-hardening-guide/rke2-self-assessment-guide-with-cis-v1.7-k8s-v1.25.md similarity index 99% rename from versioned_docs/version-2.7/reference-guides/rancher-security/hardening-guides/rke2-hardening-guide/rke2-self-assessment-guide-with-cis-v1.23-k8s-v1.25.md rename to versioned_docs/version-2.7/reference-guides/rancher-security/hardening-guides/rke2-hardening-guide/rke2-self-assessment-guide-with-cis-v1.7-k8s-v1.25.md index 4d524d3fab4..5c324f64898 100644 --- a/versioned_docs/version-2.7/reference-guides/rancher-security/hardening-guides/rke2-hardening-guide/rke2-self-assessment-guide-with-cis-v1.23-k8s-v1.25.md +++ b/versioned_docs/version-2.7/reference-guides/rancher-security/hardening-guides/rke2-hardening-guide/rke2-self-assessment-guide-with-cis-v1.7-k8s-v1.25.md @@ -1,5 +1,5 @@ --- -title: RKE2 Self-Assessment Guide - CIS Benchmark v1.23 - K8s v1.25 +title: RKE2 Self-Assessment Guide - CIS Benchmark v1.7 - K8s v1.25 --- This document is a companion to the [RKE2 Hardening Guide](../../../../pages-for-subheaders/rke2-hardening-guide.md), which provides prescriptive guidance on how to harden RKE2 clusters that are running in production and managed by Rancher. This benchmark guide helps you evaluate the security of a hardened cluster against each control in the CIS Kubernetes Benchmark. @@ -8,13 +8,13 @@ This guide corresponds to the following versions of Rancher, CIS Benchmarks, and | Rancher Version | CIS Benchmark Version | Kubernetes Version | |-----------------|-----------------------|--------------------| -| Rancher v2.7 | Benchmark v1.23 | Kubernetes v1.25 | +| Rancher v2.7 | Benchmark v1.7 | Kubernetes v1.25 | This guide walks through the various controls and provide updated example commands to audit compliance in Rancher created clusters. Because Rancher and RKE2 install Kubernetes services as Docker containers, many of the control verification checks in the CIS Kubernetes Benchmark don't apply. These checks will return a result of `Not Applicable`. This document is for Rancher operators, security teams, auditors and decision makers. -For more information about each control, including detailed descriptions and remediations for failing tests, refer to the corresponding section of the CIS Kubernetes Benchmark v1.23. You can download the benchmark, after creating a free account, at [Center for Internet Security (CIS)](https://www.cisecurity.org/benchmark/kubernetes/). +For more information about each control, including detailed descriptions and remediations for failing tests, refer to the corresponding section of the CIS Kubernetes Benchmark v1.7. You can download the benchmark, after creating a free account, at [Center for Internet Security (CIS)](https://www.cisecurity.org/benchmark/kubernetes/). ## Testing Methodology diff --git a/versioned_sidebars/version-2.7-sidebars.json b/versioned_sidebars/version-2.7-sidebars.json index 6182a1ac759..a090120d185 100644 --- a/versioned_sidebars/version-2.7-sidebars.json +++ b/versioned_sidebars/version-2.7-sidebars.json @@ -1042,7 +1042,7 @@ "items": [ "reference-guides/rancher-security/hardening-guides/rke2-hardening-guide/rke2-self-assessment-guide-with-cis-v1.23-k8s-v1.23", "reference-guides/rancher-security/hardening-guides/rke2-hardening-guide/rke2-self-assessment-guide-with-cis-v1.23-k8s-v1.24", - "reference-guides/rancher-security/hardening-guides/rke2-hardening-guide/rke2-self-assessment-guide-with-cis-v1.23-k8s-v1.25" + "reference-guides/rancher-security/hardening-guides/rke2-hardening-guide/rke2-self-assessment-guide-with-cis-v1.7-k8s-v1.25" ] }, {