CMP-2459: PCI-DSS 4 Requirement 7

[yuumasato]

Description:

• 7.1 - not applicable
  Managing and protecting access to card holder data is a responsibility of the payment entity.
• 7.2 - inherently met based on the single requirement that is applicable
  Assessing whether a user has legit access need to a system componetn is resposibility of the payment entity.
• 7.3 - inherently met
  OpenShift supports and enforces RBAC by default.

[github-actions]

Start a new ephemeral environment with changes proposed in this pull request:

Fedora Environment

Oracle Linux 8 Environment

[github-actions]

🤖 A k8s content image for this PR is available at:
ghcr.io/complianceascode/k8scontent:12090
This image was built from commit: f786e0b

Click here to see how to deploy it

If you alread have Compliance Operator deployed:
utils/build_ds_container.py -i ghcr.io/complianceascode/k8scontent:12090

Otherwise deploy the content and operator together by checking out ComplianceAsCode/compliance-operator and:
CONTENT_IMAGE=ghcr.io/complianceascode/k8scontent:12090 make deploy-local

[codeclimate]

Code Climate has analyzed commit f786e0b and detected 0 issues on this pull request.

The test coverage on the diff in this pull request is 100.0% (50% is the threshold).

This pull request will bring the total coverage in the repository to 59.4% (0.0% change).

View more on Code Climate.

[rhmdnd]

/lgtm

[xiaojiey]

/hold for review

[xiaojiey]

/hold for test

[xiaojiey]

/lgtm

[xiaojiey]

Verification pass with ghcr.io/complianceascode/k8scontent:12090:

% oc get ccr | grep roles-defined
upstream-ocp4-pci-dss-4-0-rbac-cluster-roles-defined                                           PASS     medium
upstream-ocp4-pci-dss-4-0-rbac-roles-defined                                                   PASS     medium

[xiaojiey]

/unhold