From 7cbf79a44ef61e8ee26a7bac2289740d9f4399a8 Mon Sep 17 00:00:00 2001 From: Catherine Luse Date: Tue, 28 Apr 2020 11:36:37 -0700 Subject: [PATCH] Simplify example for skipping CIS scan tests --- .../v2.x/en/security/security-scan/_index.md | 16 ++++++---------- 1 file changed, 6 insertions(+), 10 deletions(-) diff --git a/content/rancher/v2.x/en/security/security-scan/_index.md b/content/rancher/v2.x/en/security/security-scan/_index.md index 7ff5cb3bd20..7a889e87090 100644 --- a/content/rancher/v2.x/en/security/security-scan/_index.md +++ b/content/rancher/v2.x/en/security/security-scan/_index.md @@ -187,17 +187,13 @@ To skip tests by editing a ConfigMap resource, 1. Create a `security-scan` namespace. 1. Create a ConfigMap named `security-scan-cfg`. -1. Enter the skip information under the key `config.json` in the following format. The CIS benchmark version is specified alongside the tests to be skipped for that version: +1. Enter the skip information under the key `config.json` in the following format: -```json -{ - "config.json": { - "skip": { - "rke-cis-1.4": [ "1.1.1", "1.2.2"] - } - } -} -``` + ``` + {"skip": {"rke-cis-1.4": [ "1.1.1", "1.2.2"]}} + ``` + + In the example above, the CIS benchmark version is specified alongside the tests to be skipped for that version. **Result:** These tests will be skipped on subsequent scans that use the defined CIS Benchmark version.