mirror of
https://github.com/rancher/rancher-docs.git
synced 2026-05-04 20:23:24 +00:00
Marty Hernandez Avedon
39 lines
1.8 KiB
Markdown
39 lines
1.8 KiB
Markdown
---
|
|
title: Skip Tests
|
|
---
|
|
|
|
<head>
|
|
<link rel="canonical" href="https://ranchermanager.docs.rancher.com/how-to-guides/advanced-user-guides/cis-scan-guides/skip-tests"/>
|
|
</head>
|
|
|
|
CIS scans can be run using test profiles with user-defined skips.
|
|
|
|
To skip tests, you will create a custom CIS scan profile. A profile contains the configuration for the CIS scan, which includes the benchmark versions to use and any specific tests to skip in that benchmark.
|
|
|
|
1. In the upper left corner, click **☰ > Cluster Management**.
|
|
1. On the **Clusters** page, go to the cluster where you want to run a CIS scan and click **Explore**.
|
|
1. Click **CIS Benchmark > Profile**.
|
|
1. From here, you can create a profile in multiple ways. To make a new profile, click **Create** and fill out the form in the UI. To make a new profile based on an existing profile, go to the existing profile and click **⋮ Clone**. If you are filling out the form, add the tests to skip using the test IDs, using the relevant CIS Benchmark as a reference. If you are creating the new test profile as YAML, you will add the IDs of the tests to skip in the `skipTests` directive. You will also give the profile a name:
|
|
|
|
```yaml
|
|
apiVersion: cis.cattle.io/v1
|
|
kind: ClusterScanProfile
|
|
metadata:
|
|
annotations:
|
|
meta.helm.sh/release-name: clusterscan-operator
|
|
meta.helm.sh/release-namespace: cis-operator-system
|
|
labels:
|
|
app.kubernetes.io/managed-by: Helm
|
|
name: "<example-profile>"
|
|
spec:
|
|
benchmarkVersion: cis-1.5
|
|
skipTests:
|
|
- "1.1.20"
|
|
- "1.1.21"
|
|
```
|
|
1. Click **Create**.
|
|
|
|
**Result:** A new CIS scan profile is created.
|
|
|
|
When you [run a scan](./run-a-scan.md) that uses this profile, the defined tests will be skipped during the scan. The skipped tests will be marked in the generated report as `Skip`.
|