public/rancher-docs
1
0
Fork 0
mirror of https://github.com/rancher/rancher-docs.git synced 2026-09-25 12:38:05 +00:00
Code Issues Packages Projects Releases Wiki Activity

Rename rke2 hardening guide (#770)

Browse Source 
* Update title

* Update sidebar

* versioned page + redirect

* Update rke2-self-assessment-guide-with-cis-v1.7-k8s-v1.25.md

title update

* Fix references to CIS scan in body

---------

Co-authored-by: martyav <marty.avedon@suse.com>
Co-authored-by: Marty Hernandez Avedon <martyavedon@gmail.com>
This commit is contained in:
Jonathan Crowther
2023-08-14 12:31:15 -04:00
committed by GitHub
co-authored by martyav Marty Hernandez Avedon
parent 7a7d6904fb
commit 23d6ec9a62
5 changed files with 16 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files
versioned_docs/version-2.7/reference-guides/rancher-security/hardening-guides/rke2-hardening-guide/rke2-self-assessment-guide-with-cis-v1.23-k8s-v1.25.md → versioned_docs/version-2.7/reference-guides/rancher-security/hardening-guides/rke2-hardening-guide/rke2-self-assessment-guide-with-cis-v1.7-k8s-v1.25.md
+3 -3
View File
@@ -1,5 +1,5 @@
---
title: RKE2 Self-Assessment Guide - CIS Benchmark v1.23 - K8s v1.25
title: RKE2 Self-Assessment Guide - CIS Benchmark v1.7 - K8s v1.25
---
This document is a companion to the [RKE2 Hardening Guide](../../../../pages-for-subheaders/rke2-hardening-guide.md), which provides prescriptive guidance on how to harden RKE2 clusters that are running in production and managed by Rancher. This benchmark guide helps you evaluate the security of a hardened cluster against each control in the CIS Kubernetes Benchmark.
@@ -8,13 +8,13 @@ This guide corresponds to the following versions of Rancher, CIS Benchmarks, and
| Rancher Version | CIS Benchmark Version | Kubernetes Version |
|-----------------|-----------------------|--------------------|
| Rancher v2.7 | Benchmark v1.23 | Kubernetes v1.25 |
| Rancher v2.7 | Benchmark v1.7 | Kubernetes v1.25 |
This guide walks through the various controls and provide updated example commands to audit compliance in Rancher created clusters. Because Rancher and RKE2 install Kubernetes services as Docker containers, many of the control verification checks in the CIS Kubernetes Benchmark don't apply. These checks will return a result of `Not Applicable`.
This document is for Rancher operators, security teams, auditors and decision makers.
For more information about each control, including detailed descriptions and remediations for failing tests, refer to the corresponding section of the CIS Kubernetes Benchmark v1.23. You can download the benchmark, after creating a free account, at [Center for Internet Security (CIS)](https://www.cisecurity.org/benchmark/kubernetes/).
For more information about each control, including detailed descriptions and remediations for failing tests, refer to the corresponding section of the CIS Kubernetes Benchmark v1.7. You can download the benchmark, after creating a free account, at [Center for Internet Security (CIS)](https://www.cisecurity.org/benchmark/kubernetes/).
## Testing Methodology