add idp requirement

sig-bsi-grundschutz · Jan 19, 2024 · c8f1934 · c8f1934
1 parent c5d1ddb
commit c8f1934
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/applications/openshift/authentication/idp_is_configured/rule.yml b/applications/openshift/authentication/idp_is_configured/rule.yml
@@ -64,6 +64,7 @@ identifiers:
 
 
 references:
+  bsi: APP.4.4.A3
   cis@ocp4: 3.1.1
   nerc-cip: CIP-004-6 R2.2.2,CIP-004-6 R2.2.3,CIP-007-3 R.1.3,CIP-007-3 R5,CIP-007-3 R5.1,CIP-007-3 R5.1.1,CIP-007-3 R5.1.2,CIP-007-3 R5.1.3,CIP-007-3 R5.2,CIP-007-3 R5.2.1,CIP-007-3 R5.2.3,CIP-007-3 R5.3.1,CIP-007-3 R5.3.2,CIP-007-3 R5.3.3
   nist: AC-2,AC-2(1),AC-2(2),AC-2(3),AC-2(4),AC-2(5),AC-2(6),AC-2(7),AC-2(8),AC-7,AC-12(1),IA-2(8),IA-2(9),SC-12(1)

diff --git a/controls/bsi_app_4_4.yml b/controls/bsi_app_4_4.yml
@@ -73,6 +73,7 @@ controls:
       - kubelet_anonymous_auth
       # Section 2
       - kubeadmin_removed
+      - idp_is_configured
       # Section 3-5
       - rbac_least_privilege
       - rbac_limit_cluster_admin