From a590cb59be43a0a1023b09e0aefe726901f652d8 Mon Sep 17 00:00:00 2001 From: sluetze <13255307+sluetze@users.noreply.github.com> Date: Tue, 12 Dec 2023 16:50:41 +0100 Subject: [PATCH] split bsi profile into node and not node --- products/ocp4/profiles/bsi-node.profile | 31 +++++++++++++++++++++++++ products/ocp4/profiles/bsi.profile | 8 +++++-- 2 files changed, 37 insertions(+), 2 deletions(-) create mode 100644 products/ocp4/profiles/bsi-node.profile diff --git a/products/ocp4/profiles/bsi-node.profile b/products/ocp4/profiles/bsi-node.profile new file mode 100644 index 000000000000..03bdfc4adfa8 --- /dev/null +++ b/products/ocp4/profiles/bsi-node.profile @@ -0,0 +1,31 @@ +documentation_complete: true + +title: 'BSI IT-Grundschutz (Basic Protection) Building Block SYS.1.6 and APP.4.4' + +platform: ocp4-node + +reference: https://www.bsi.bund.de/SharedDocs/Downloads/EN/BSI/Grundschutz/International/bsi_it_gs_comp_2022.pdf + +metadata: + SMEs: + - ermeratos + - benruland + - oliverbutanowitz + - sluetze + version: 2022 + +description: |- + This profile defines a baseline that aligns to the BSI (Federal Office for Security Information) IT-Grundschutz + Basic-Protection. + + This baseline implements configuration requirements from the following + sources: + + - Building-Block SYS.1.6 Containerisation + - Building-Block APP.4.4 Kubernetes + + +filter_rules: '"ocp4-node" in platforms or "ocp4-master-node" in platforms or "ocp4-node-on-sdn" in platforms or "ocp4-node-on-ovn" in platforms' + +selections: + - bsi_app_4_4:all \ No newline at end of file diff --git a/products/ocp4/profiles/bsi.profile b/products/ocp4/profiles/bsi.profile index 8540b1801dc8..6921e2fab272 100644 --- a/products/ocp4/profiles/bsi.profile +++ b/products/ocp4/profiles/bsi.profile @@ -2,7 +2,7 @@ documentation_complete: true title: 'BSI IT-Grundschutz (Basic Protection) Building Block SYS.1.6 and APP.4.4' -platform: ocp4-node +platform: ocp4 reference: https://www.bsi.bund.de/SharedDocs/Downloads/EN/BSI/Grundschutz/International/bsi_it_gs_comp_2022.pdf @@ -25,7 +25,11 @@ description: |- - Building-Block APP.4.4 Kubernetes -filter_rules: '"ocp4-node" in platforms or "ocp4-master-node" in platforms or "ocp4-node-on-sdn" in platforms or "ocp4-node-on-ovn" in platforms' +filter_rules: '"ocp4-node" not in platforms and "ocp4-master-node" not in platforms and "ocp4-node-on-sdn" not in platforms and "ocp4-node-on-ovn" not in platforms' selections: - bsi_app_4_4:all + ### Helper Rules + ### This is a helper rule to fetch the required api resource for detecting OCP version + - version_detect_in_ocp + - version_detect_in_hypershift \ No newline at end of file