Merge pull request #10494 from jhrozek/misc

Link api_server_encryption_provider_cipher with CIS 2.8
ComplianceAsCode · Jun 8, 2023 · c2d263a · c2d263a
2 parents c5fc86a + 0b628c8
commit c2d263a
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/applications/openshift/api-server/api_server_encryption_provider_cipher/rule.yml b/applications/openshift/api-server/api_server_encryption_provider_cipher/rule.yml
@@ -58,7 +58,7 @@ identifiers:
 severity: medium
 
 references:
-    cis@ocp4: 1.2.33,1.2.34
+    cis@ocp4: 1.2.33,1.2.34,2.8
     nerc-cip: CIP-003-8 R4.2
     nist: SC-28,SC-28(1)
     pcidss: Req-2.2

diff --git a/products/ocp4/profiles/cis.profile b/products/ocp4/profiles/cis.profile
@@ -113,6 +113,7 @@ selections:
     - api_server_etcd_ca
   # 1.2.33 Ensure that the --encryption-provider-config argument is set as appropriate
   # 1.2.34 Ensure that encryption providers are appropriately configured
+  # 2.8 Encrypt etc
     - api_server_encryption_provider_cipher
   # 1.2.35 Ensure that the API Server only makes use of Strong Cryptographic Ciphers
     - api_server_tls_cipher_suites