From db7514d1dd81f2e1b85452a1328be3ba8c6de283 Mon Sep 17 00:00:00 2001 From: Simar Date: Tue, 22 Oct 2024 23:20:37 -0600 Subject: [PATCH] fix spec id --- .../cisbenchmarks/apiserver/security_context_deny_plugin.rego | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/checks/kubernetes/cisbenchmarks/apiserver/security_context_deny_plugin.rego b/checks/kubernetes/cisbenchmarks/apiserver/security_context_deny_plugin.rego index 88c111bb..bb3c374a 100644 --- a/checks/kubernetes/cisbenchmarks/apiserver/security_context_deny_plugin.rego +++ b/checks/kubernetes/cisbenchmarks/apiserver/security_context_deny_plugin.rego @@ -11,7 +11,9 @@ # avd_id: AVD-KCV-0013 # frameworks: # k8s-cis-1.23: -# - "1.23" +# - "1.2.13" +# rke2-cis-1.24: +# - "1.2.13" # severity: LOW # short_code: ensure-admission-control-plugin-security-context-deny-is-set-if-pod-security-policy-is-not-used # recommended_action: "Edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the Control Plane node and set the --enable-admission-plugins parameter to include SecurityContextDeny, unless PodSecurityPolicy is already in place."