Skip to content

Commit

Permalink
split bsi profile into node and not node
Browse files Browse the repository at this point in the history
  • Loading branch information
sluetze committed Dec 12, 2023
1 parent 30f8cfa commit a590cb5
Show file tree
Hide file tree
Showing 2 changed files with 37 additions and 2 deletions.
31 changes: 31 additions & 0 deletions products/ocp4/profiles/bsi-node.profile
Original file line number Diff line number Diff line change
@@ -0,0 +1,31 @@
documentation_complete: true

title: 'BSI IT-Grundschutz (Basic Protection) Building Block SYS.1.6 and APP.4.4'

platform: ocp4-node

reference: https://www.bsi.bund.de/SharedDocs/Downloads/EN/BSI/Grundschutz/International/bsi_it_gs_comp_2022.pdf

metadata:
SMEs:
- ermeratos
- benruland
- oliverbutanowitz
- sluetze
version: 2022

description: |-
This profile defines a baseline that aligns to the BSI (Federal Office for Security Information) IT-Grundschutz
Basic-Protection.

This baseline implements configuration requirements from the following
sources:

- Building-Block SYS.1.6 Containerisation
- Building-Block APP.4.4 Kubernetes


filter_rules: '"ocp4-node" in platforms or "ocp4-master-node" in platforms or "ocp4-node-on-sdn" in platforms or "ocp4-node-on-ovn" in platforms'

selections:
- bsi_app_4_4:all
8 changes: 6 additions & 2 deletions products/ocp4/profiles/bsi.profile
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@ documentation_complete: true

title: 'BSI IT-Grundschutz (Basic Protection) Building Block SYS.1.6 and APP.4.4'

platform: ocp4-node
platform: ocp4

reference: https://www.bsi.bund.de/SharedDocs/Downloads/EN/BSI/Grundschutz/International/bsi_it_gs_comp_2022.pdf

Expand All @@ -25,7 +25,11 @@ description: |-
- Building-Block APP.4.4 Kubernetes


filter_rules: '"ocp4-node" in platforms or "ocp4-master-node" in platforms or "ocp4-node-on-sdn" in platforms or "ocp4-node-on-ovn" in platforms'
filter_rules: '"ocp4-node" not in platforms and "ocp4-master-node" not in platforms and "ocp4-node-on-sdn" not in platforms and "ocp4-node-on-ovn" not in platforms'

selections:
- bsi_app_4_4:all
### Helper Rules
### This is a helper rule to fetch the required api resource for detecting OCP version
- version_detect_in_ocp
- version_detect_in_hypershift

0 comments on commit a590cb5

Please sign in to comment.