Merge pull request ComplianceAsCode#12371 from yuumasato/update-asser…

…tions-for-ingress-controller-on-4-0-files PCI-DSS-4-0: Add cipher suite ingress controller assertion
VCTLabs · Sep 11, 2024 · bd26937 · bd26937
2 parents d80b25c + fb1a0a7
commit bd26937
Show file tree

Hide file tree

Showing 6 changed files with 18 additions and 0 deletions.
diff --git a/tests/assertions/ocp4/ocp4-pci-dss-4-0-4.12.yml b/tests/assertions/ocp4/ocp4-pci-dss-4-0-4.12.yml
@@ -230,6 +230,9 @@ rule_results:
  e2e-pci-dss-4-0-kubelet-configure-tls-cert:
    default_result: PASS
    result_after_remediation: PASS
+ e2e-pci-dss-4-0-kubelet-configure-tls-cipher-suites-ingress-controller:
+   default_result: FAIL
+   result_after_remediation: PASS
  e2e-pci-dss-4-0-kubelet-configure-tls-key:
    default_result: PASS
    result_after_remediation: PASS

diff --git a/tests/assertions/ocp4/ocp4-pci-dss-4-0-4.13.yml b/tests/assertions/ocp4/ocp4-pci-dss-4-0-4.13.yml
@@ -230,6 +230,9 @@ rule_results:
  e2e-pci-dss-4-0-kubelet-configure-tls-cert:
    default_result: PASS
    result_after_remediation: PASS
+ e2e-pci-dss-4-0-kubelet-configure-tls-cipher-suites-ingress-controller:
+   default_result: FAIL
+   result_after_remediation: PASS
  e2e-pci-dss-4-0-kubelet-configure-tls-key:
    default_result: PASS
    result_after_remediation: PASS

diff --git a/tests/assertions/ocp4/ocp4-pci-dss-4-0-4.14.yml b/tests/assertions/ocp4/ocp4-pci-dss-4-0-4.14.yml
@@ -230,6 +230,9 @@ rule_results:
  e2e-pci-dss-4-0-kubelet-configure-tls-cert:
    default_result: PASS
    result_after_remediation: PASS
+ e2e-pci-dss-4-0-kubelet-configure-tls-cipher-suites-ingress-controller:
+   default_result: FAIL
+   result_after_remediation: PASS
  e2e-pci-dss-4-0-kubelet-configure-tls-key:
    default_result: PASS
    result_after_remediation: PASS

diff --git a/tests/assertions/ocp4/ocp4-pci-dss-4-0-4.15.yml b/tests/assertions/ocp4/ocp4-pci-dss-4-0-4.15.yml
@@ -230,6 +230,9 @@ rule_results:
  e2e-pci-dss-4-0-kubelet-configure-tls-cert:
    default_result: PASS
    result_after_remediation: PASS
+ e3e-pci-dss-4-0-kubelet-configure-tls-cipher-suites-ingress-controller:
+   default_result: FAIL
+   result_after_remediation: PASS
  e2e-pci-dss-4-0-kubelet-configure-tls-key:
    default_result: PASS
    result_after_remediation: PASS

diff --git a/tests/assertions/ocp4/ocp4-pci-dss-4-0-4.16.yml b/tests/assertions/ocp4/ocp4-pci-dss-4-0-4.16.yml
@@ -230,6 +230,9 @@ rule_results:
  e2e-pci-dss-4-0-kubelet-configure-tls-cert:
    default_result: PASS
    result_after_remediation: PASS
+ e2e-pci-dss-4-0-kubelet-configure-tls-cipher-suites-ingress-controller:
+   default_result: FAIL
+   result_after_remediation: PASS
  e2e-pci-dss-4-0-kubelet-configure-tls-key:
    default_result: PASS
    result_after_remediation: PASS

diff --git a/tests/assertions/ocp4/ocp4-pci-dss-4-0-4.17.yml b/tests/assertions/ocp4/ocp4-pci-dss-4-0-4.17.yml
@@ -230,6 +230,9 @@ rule_results:
  e2e-pci-dss-4-0-kubelet-configure-tls-cert:
    default_result: NOT-APPLICABLE
    result_after_remediation: NOT-APPLICABLE
+ e2e-pci-dss-4-0-kubelet-configure-tls-cipher-suites-ingress-controller:
+   default_result: FAIL
+   result_after_remediation: PASS
  e2e-pci-dss-4-0-kubelet-configure-tls-key:
    default_result: NOT-APPLICABLE
    result_after_remediation: NOT-APPLICABLE