From c9231f7aaceede77ae03d070e3eb47ea9105e5c8 Mon Sep 17 00:00:00 2001 From: sluetze <13255307+sluetze@users.noreply.github.com> Date: Thu, 19 Dec 2024 11:32:04 +0100 Subject: [PATCH] move ingress_controller_tls_cipher_suites to networking --- .../ingress_controller_tls_cipher_suites}/kubernetes/shared.yml | 0 .../ingress_controller_tls_cipher_suites}/rule.yml | 0 .../ingress_controller_tls_cipher_suites}/tests/ocp4/e2e.yml | 0 controls/cis_ocp_1_4_0/section-4.yml | 2 +- products/ocp4/profiles/default.profile | 1 - 5 files changed, 1 insertion(+), 2 deletions(-) rename applications/openshift/{kubelet/kubelet_configure_tls_cipher_suites_ingresscontroller => networking/ingress_controller_tls_cipher_suites}/kubernetes/shared.yml (100%) rename applications/openshift/{kubelet/kubelet_configure_tls_cipher_suites_ingresscontroller => networking/ingress_controller_tls_cipher_suites}/rule.yml (100%) rename applications/openshift/{kubelet/kubelet_configure_tls_cipher_suites_ingresscontroller => networking/ingress_controller_tls_cipher_suites}/tests/ocp4/e2e.yml (100%) diff --git a/applications/openshift/kubelet/kubelet_configure_tls_cipher_suites_ingresscontroller/kubernetes/shared.yml b/applications/openshift/networking/ingress_controller_tls_cipher_suites/kubernetes/shared.yml similarity index 100% rename from applications/openshift/kubelet/kubelet_configure_tls_cipher_suites_ingresscontroller/kubernetes/shared.yml rename to applications/openshift/networking/ingress_controller_tls_cipher_suites/kubernetes/shared.yml diff --git a/applications/openshift/kubelet/kubelet_configure_tls_cipher_suites_ingresscontroller/rule.yml b/applications/openshift/networking/ingress_controller_tls_cipher_suites/rule.yml similarity index 100% rename from applications/openshift/kubelet/kubelet_configure_tls_cipher_suites_ingresscontroller/rule.yml rename to applications/openshift/networking/ingress_controller_tls_cipher_suites/rule.yml diff --git a/applications/openshift/kubelet/kubelet_configure_tls_cipher_suites_ingresscontroller/tests/ocp4/e2e.yml b/applications/openshift/networking/ingress_controller_tls_cipher_suites/tests/ocp4/e2e.yml similarity index 100% rename from applications/openshift/kubelet/kubelet_configure_tls_cipher_suites_ingresscontroller/tests/ocp4/e2e.yml rename to applications/openshift/networking/ingress_controller_tls_cipher_suites/tests/ocp4/e2e.yml diff --git a/controls/cis_ocp_1_4_0/section-4.yml b/controls/cis_ocp_1_4_0/section-4.yml index 9fa0e8f27a7..5fac05f8433 100644 --- a/controls/cis_ocp_1_4_0/section-4.yml +++ b/controls/cis_ocp_1_4_0/section-4.yml @@ -158,6 +158,6 @@ controls: status: automated rules: - kubelet_configure_tls_cipher_suites - - kubelet_configure_tls_cipher_suites_ingresscontroller + - ingress_controller_tls_cipher_suites levels: [ level_1, ] diff --git a/products/ocp4/profiles/default.profile b/products/ocp4/profiles/default.profile index 90bdb14c781..45d80e491fd 100644 --- a/products/ocp4/profiles/default.profile +++ b/products/ocp4/profiles/default.profile @@ -45,7 +45,6 @@ selections: - api_server_api_priority_v1_flowschema_catch_all - file_groupowner_openvswitch - gcp_disk_encryption_enabled - - kubelet_configure_tls_cipher_suites_ingresscontroller - file_groupowner_ovs_conf_db_lock_s390x - ebs_encryption_enabled_on_machinesets - project_template_network_policy