General

TEMPLATE openshift_cluster_setting

Macro which generates a warning indicating how to make use of a Kubernetes/OpenShift-related rule. This is used by the Compliance Operator to automatically figure out what resources to fetch.

  • endpoint (String/Array): The Kubernetes object path(s) to fetch

openshift_cluster_setting(endpoint)

TEMPLATE openshift_filtered_cluster_setting

Macro which generates a warning indicating how to make use of a Kubernetes/OpenShift-related rule as well as how to filter it. This is used by the Compliance Operator to automatically figure out what resources to fetch. The filtering directive can be used by the jq command ( https://stedolan.github.io/jq/manual/ ).

  • path_filter_pairs (dict): Kubernetes object path/filter directive pairs

openshift_filtered_cluster_setting(path_filter_pairs)

TEMPLATE openshift_filtered_path

Macro which generates a unique path for a filtered Kubernetes resource. The path and the filter are used to generate a unique identifier in such a way that it won’t conflict with unfiltered resources

  • path (String): The Kubernetes object path to fetch

  • filter (String): A filtering directive

openshift_filtered_path(path, filter)

TEMPLATE ocil_oc_pipe_jq_filter

Macro which generates a warning indicating how to make use of a

ocil_oc_pipe_jq_filter(object, jqfilter, namespace=none, all_namespaces=false)

TEMPLATE ocil_sshd_option

Example usage: ocil_sshd_option(default=”no”, option=”Banner”, value=”/etc/issue”)

ocil_sshd_option(default, option, value)