mirror of
https://github.com/rancher/rancher-docs.git
synced 2026-11-10 02:39:18 +00:00
* #755 Update CIS Benchmark note * Update docs/how-to-guides/advanced-user-guides/cis-scan-guides/install-rancher-cis-benchmark.md Co-authored-by: Billy Tat <btat@suse.com> * syncing version-2.7 --------- Co-authored-by: Billy Tat <btat@suse.com>
This commit is contained in:
1 parent
d9bf7f41a5
commit
411825bbdc
2 files changed
+2
-2
No files matched your search
+1
-1
@@ -12,6 +12,6 @@ title: Install Rancher CIS Benchmark
|
||||
|
||||
:::note
|
||||
|
||||
CIS Benchmark 4.0.0 and above have PSPs disabled by default. To install CIS Benchmark on a hardened cluster, set `global.psp.enabled` to `true` in the values before installing the chart.
|
||||
If you are running Kubernetes v1.24 or earlier, and have a [Pod Security Policy](../../new-user-guides/authentication-permissions-and-global-configuration/create-pod-security-policies.md) (PSP) hardened cluster, CIS Benchmark 4.0.0 and later disable PSPs by default. To install CIS Benchmark on a PSP-hardened cluster, set `global.psp.enabled` to `true` in the values before installing the chart. [Pod Security Admission](../../new-user-guides/authentication-permissions-and-global-configuration/pod-security-standards.md) (PSA) hardened clusters aren't affected.
|
||||
|
||||
:::
|
||||
+1
-1
@@ -12,6 +12,6 @@ title: Install Rancher CIS Benchmark
|
||||
|
||||
:::note
|
||||
|
||||
CIS Benchmark 4.0.0 and above have PSPs disabled by default. To install CIS Benchmark on a hardened cluster, set `global.psp.enabled` to `true` in the values before installing the chart.
|
||||
If you are running Kubernetes v1.24 or earlier, and have a [Pod Security Policy](../../new-user-guides/authentication-permissions-and-global-configuration/create-pod-security-policies.md) (PSP) hardened cluster, CIS Benchmark 4.0.0 and later disable PSPs by default. To install CIS Benchmark on a PSP-hardened cluster, set `global.psp.enabled` to `true` in the values before installing the chart. [Pod Security Admission](../../new-user-guides/authentication-permissions-and-global-configuration/pod-security-standards.md) (PSA) hardened clusters aren't affected.
|
||||
|
||||
:::
|
||||
Reference in new issue
Block a user