Kubernetes
- TEMPLATE kubernetes_machine_config_file
- Macro which generates Kubernetes remediation in MachineConfig format:
path (String): Path to the configuration file.
file_permissions_mode (String): File permissions to be applied to the file represented by path argument
source_content (String): The source of the content to be applied.
kubernetes_machine_config_file(path=’’, file_permissions_mode=’’, source=’’)
- TEMPLATE kubernetes_machine_config_file_with_dependencies
Macro which generates Kubernetes remediation in MachineConfig format with dependencies reflected:
path (String): Path to the configuration file.
file_permissions_mode (String): File permissions to be applied to the file represented by path argument
source_content (String): The source of the content to be applied.
deps (list): The list of dependencies for this remediation to be applies (they’re XCCDF IDs)
ocp_version_deps (String): States that the remediation needs a certain OpenShift version range to work
k8s_version_deps (String): States that the remediation needs a certain Kubernetes version range to work
kubernetes_machine_config_file_with_dependencies(path=’’, file_permissions_mode=’’, source=’’, deps=[], ocp_version_range=’’, k8s_version_range=’’)
- TEMPLATE kubernetes_sshd_set
High level macro to generate Kubernetes remediation to set the ssh daemon configuration file.
kubernetes_sshd_set()
- TEMPLATE kubernetes_usbguard_set
High level macro to generate Kubernetes remediation to set the usbguard daemon configuration file.
kubernetes_usbguard_set(deps=[])
- TEMPLATE kubernetes_machineconfig_audit_add_syscall_rule
Macro to generate MachineConfig adding an auditd rule for syscall watching
kubernetes_machineconfig_audit_add_syscall_rule(path=’’, syscalls=[], key=’’, fields=’’)
- TEMPLATE kubernetes_machineconfig_ospp_audit_rules
Macro to generate MachineConfig setting OSPP audit rules
kubernetes_machineconfig_ospp_audit_rules()
- TEMPLATE kubernetes_machineconfig_logrotate_config
Macro to generate MachineConfig setting our recommended logrotate.conf
kubernetes_machineconfig_logrotate_config()
- TEMPLATE kubernetes_machineconfig_auditd_config
Macro to generate MachineConfig setting our recommended auditd.conf
kubernetes_machineconfig_auditd_config()
- TEMPLATE kubernetes_machineconfig_chrony_config
Macro to generate MachineConfig setting our recommended chrony.conf
kubernetes_machineconfig_chrony_config()
- TEMPLATE api_server_config
- Macro which generates Kubernetes remediation in APIServer format:
path (String): path for the variable
parameter (String): name of the variable to be set
value (String): xccdf vairable name to that varaiable
api_server_config(path=’’,parameter=’’, value=’’)
- TEMPLATE kubelet_config
- Macro which generates Kubernetes remediation in kubelet config format:
path (String): path for the variable
parameter (String): name of the variable to be set
value (String): xccdf vairable name to that varaiable
kubelet_config(path=’’, parameter=’’, value=’’)
- TEMPLATE kubelet_config_fixed
- Macro which generates Kubernetes remediation in kubelet config format:
path (String): path for the variable
parameter (String): name of the variable to be set
value (String): the fixed value to that varaiable
kubelet_config_fixed(path=’’, parameter=’’, value=’’)