Skip to content

Commit

Permalink
Add pre requisite rules for Req 8.2 and 8.3
Browse files Browse the repository at this point in the history
Sections 8.2 and 8.3 are heavily dependant on the selected identity
provider and removal of kubeadmin user.
So rules for these tow aspects were added to the controls.
  • Loading branch information
yuumasato committed Jul 15, 2024
1 parent 504ec6c commit 80eaadb
Showing 1 changed file with 12 additions and 0 deletions.
12 changes: 12 additions & 0 deletions controls/pcidss_4_ocp4.yml
Original file line number Diff line number Diff line change
Expand Up @@ -2024,6 +2024,12 @@ controls:
levels:
- base
status: automated
notes: |-
For this control to be satisfiable an identity provider must be used and the kubeadmin user
needs to be removed.
rules:
- idp_is_configured
- kubeadmin_removed
controls:
- id: 8.2.1
title: All users are assigned a unique ID before access to system components or cardholder
Expand Down Expand Up @@ -2162,6 +2168,12 @@ controls:
levels:
- base
status: not applicable
notes: |-
For this control to be satisfiable an identity provider must be used and the kubeadmin user
needs to be removed.
rules:
- idp_is_configured
- kubeadmin_removed
controls:
- id: 8.3.1
title: All user access to system components for users and administrators is authenticated.
Expand Down

0 comments on commit 80eaadb

Please sign in to comment.