Commit Graph

  • bd1a4768f1
    Merge pull request #548 from rancher/renovate/github.com-urfave-cli-v3-3.x main Paulo Gomes 2025-10-22 07:15:16 +0100
  • 1f51d2c4df
    chore(deps): update module github.com/urfave/cli/v3 to v3.5.0 renovate-rancher[bot] 2025-10-22 04:40:09 +0000
  • cfe252d5b5
    fix: add condition to create release (#544) Krunal Hingu 2025-10-17 07:43:02 -0300
  • 3ce81e0b2b
    fix: add condition to create release (#545) v0.7.3 release/v0.7 Krunal Hingu 2025-10-17 07:42:55 -0300
  • 45acf145f4
    fix: add condition to create release (#546) v0.6.4 release/v0.6 Krunal Hingu 2025-10-17 07:42:46 -0300
  • c55de05f44
    fix: add condition to create release (#547) v0.8.0-rc.2 release/v0.8 Krunal Hingu 2025-10-17 07:42:38 -0300
  • 982be47d7b fix: add condition to create release Krunal Hingu 2025-10-17 15:47:47 +0530
  • 96f8c97230 fix: add condition to create release Krunal Hingu 2025-10-17 15:37:40 +0530
  • 43ff1113db fix: add condition to create release Krunal Hingu 2025-10-17 15:36:55 +0530
  • db9064b72f fix: add condition to create release Krunal Hingu 2025-10-17 15:35:47 +0530
  • 2c89055dfd
    Merge pull request #543 from swastik959/k8s-v1.34 v0.8.0-rc.1 Swastik Gour 2025-10-17 13:15:43 +0530
  • 550948ff20 [1.34] bumped k8s dependencies swastik959 2025-10-17 10:45:17 +0530
  • df4e16500a
    Merge pull request #540 from krunalhinguu/backport-539-v0.7 v0.6.3-rc.3 v0.6.3 Andy Pitcher 2025-10-15 11:33:33 +0200
  • 0f2d483c9d
    Merge pull request #541 from krunalhinguu/backport-539-v0.6 v0.7.2-rc.3 v0.7.2 Andy Pitcher 2025-10-15 11:33:23 +0200
  • 34426ba1d8
    Merge pull request #542 from krunalhinguu/backport-539-v0.5 v0.5.8-rc.3 v0.5.8 release/v0.5 Andy Pitcher 2025-10-15 11:32:55 +0200
  • 728ca70e9f
    Merge pull request #539 from andypitcher/fix-k3s-cis-1.11-node-4.2.4-readonlyport Andy Pitcher 2025-10-15 11:32:32 +0200
  • 31fb100e6b fix: 4.2.4 (read-only-port) change test and remediation to reflect k3s' new default --- K3s enforces by default --read-only-port to 0, so we only verify the presence of --read-only-port=0. Andy Pitcher 2025-10-13 21:28:41 +0200
  • 2f2bdc0475 fix: 4.2.4 (read-only-port) change test and remediation to reflect k3s' new default --- K3s enforces by default --read-only-port to 0, so we only verify the presence of --read-only-port=0. Andy Pitcher 2025-10-13 21:28:41 +0200
  • 41cc4f7237 fix: 4.2.4 (read-only-port) change test and remediation to reflect k3s' new default --- K3s enforces by default --read-only-port to 0, so we only verify the presence of --read-only-port=0. Andy Pitcher 2025-10-13 21:28:41 +0200
  • 9916954324
    fix: 4.2.4 (read-only-port) change test and remediation to reflect k3s' new default --- K3s enforces by default --read-only-port to 0, so we only verify the presence of --read-only-port=0. Andy Pitcher 2025-10-13 21:28:41 +0200
  • 71119710b7
    refactor: updating release creation step (#536) Krunal Hingu 2025-10-09 01:26:09 -0300
  • daf6328001
    refactor: updating release creation step (#538) Krunal Hingu 2025-10-09 01:25:42 -0300
  • f5c3acf1e6
    [v0.7] Update release creation step (#537) Krunal Hingu 2025-10-09 01:25:27 -0300
  • 3d07e9ad64 chore(deps): update dependency aquasecurity/kube-bench to v0.13.0 renovate-rancher[bot] 2025-09-30 04:38:46 +0000
  • c9b85c8814 bump kube-bench v0.13.0 Krunal Hingu 2025-10-08 10:11:34 +0530
  • 56883bb583
    [backport][release/v0.6] add cis 1.11 for rke2 & k3s (#534) v0.6.3-rc.2 Krunal Hingu 2025-10-07 01:30:43 -0300
  • 8a68c6fc80
    Merge pull request #535 from krunalhinguu/backport-cis-1.11-v0.5 v0.5.8-rc.2 Krunal Hingu 2025-10-07 01:30:27 -0300
  • 94f5853c7e refactor: updating release creation step Krunal Hingu 2025-10-06 11:20:41 +0530
  • ad0da50a81 refactor: updating release creation step Krunal Hingu 2025-10-06 11:20:41 +0530
  • be016301bd refactor: updating release creation step Krunal Hingu 2025-10-06 11:20:41 +0530
  • 7efd22d30c k3s-cis-1.11 - Generate placeholder files - add target mapping and versions - master: 1.2.30 Ensure that the --service-account-extend-token-expiration parameter is set to false - master: 1.2.20 Ensure that the Kubernetes PKI certificate file permissions are set to 644 or more restrictive (Manual) - Changed from 600 to 644 - Changed from Manual to Automated - node: 4.2.14 Ensure that the --seccomp-default parameter is set to true (Manual) - node: 4.2.4 Verify that if defined, the --read-only-port argument is set to 0 (Automated) - Add 'if defined' - policies: 5.1.1 to 5.1.6 from (Automated) to (Manual) - policies: section titled 'General Policies' was renumbered from 5.7 in v1.10 to 5.6 Andy Pitcher 2025-09-10 12:08:16 +0200
  • c43539d2f6 rke2-cis-1.11 - Generate placeholder files - master: 1.2.30 Ensure that the --service-account-extend-token-expiration parameter is set to false - master: 1.1.20 Ensure that the Kubernetes PKI certificate file permissions are set to 644 or more restrictive (Automated) - Changed from 600 to 644 - Changed from Manual to Automated - node: 4.2.14 Ensure that the --seccomp-default parameter is set to true (Manual) - node: 4.2.4 Verify that if defined, the --read-only-port argument is set to 0 (Automated) - Add 'if defined' - policies: 5.1.1 to 5.1.6 from (Automated) to (Manual) - policies: section titled 'General Policies' was renumbered from 5.7 in v1.10 to 5.6 Andy Pitcher 2025-09-12 19:57:06 +0200
  • 7e0a81015c k3s-cis-1.11 - Generate placeholder files - add target mapping and versions - master: 1.2.30 Ensure that the --service-account-extend-token-expiration parameter is set to false - master: 1.2.20 Ensure that the Kubernetes PKI certificate file permissions are set to 644 or more restrictive (Manual) - Changed from 600 to 644 - Changed from Manual to Automated - node: 4.2.14 Ensure that the --seccomp-default parameter is set to true (Manual) - node: 4.2.4 Verify that if defined, the --read-only-port argument is set to 0 (Automated) - Add 'if defined' - policies: 5.1.1 to 5.1.6 from (Automated) to (Manual) - policies: section titled 'General Policies' was renumbered from 5.7 in v1.10 to 5.6 Andy Pitcher 2025-09-10 12:08:16 +0200
  • 386f95ac24 rke2-cis-1.11 - Generate placeholder files - master: 1.2.30 Ensure that the --service-account-extend-token-expiration parameter is set to false - master: 1.1.20 Ensure that the Kubernetes PKI certificate file permissions are set to 644 or more restrictive (Automated) - Changed from 600 to 644 - Changed from Manual to Automated - node: 4.2.14 Ensure that the --seccomp-default parameter is set to true (Manual) - node: 4.2.4 Verify that if defined, the --read-only-port argument is set to 0 (Automated) - Add 'if defined' - policies: 5.1.1 to 5.1.6 from (Automated) to (Manual) - policies: section titled 'General Policies' was renumbered from 5.7 in v1.10 to 5.6 Andy Pitcher 2025-09-12 19:57:06 +0200
  • b08e5ee040
    Merge pull request #533 from swastik959/release/v0.5 v0.5.8-rc.1 Swastik Gour 2025-10-03 16:23:34 +0530
  • ebdfdc67f8 [backport][v0.6] Add cis-1.11 generic and update configmap swastik959 2025-10-03 15:34:36 +0530
  • 7982456fee
    Merge pull request #531 from krunalhinguu/update-release-workflow-v0.6 v0.6.3-rc.1 Swastik Gour 2025-10-03 15:04:40 +0530
  • 041cc9d3e0
    Merge pull request #532 from krunalhinguu/update-release-workflow-v0.7 v0.7.2-rc.2 mitulshah-suse 2025-10-03 10:43:08 +0530
  • 43dbb2247a feat: update golang version to 1.25 in Dockerfile Krunal Hingu 2025-10-01 21:26:06 +0530
  • 84f96fd238 feat: update kube-bench v0.13.0 Krunal Hingu 2025-10-01 16:38:03 +0530
  • 74f442cce6 feat: Add cis-1.11 generic and update configmap Andy Pitcher 2025-09-26 18:12:44 +0200
  • ce922b6e3a feat: Add cis-1.11 generic and update configmap Andy Pitcher 2025-09-26 18:12:44 +0200
  • 5881bf51a7
    Merge pull request #528 from andypitcher/cis-1.11 Andy Pitcher 2025-09-30 16:51:00 +0200
  • e25836747b
    feat: Add cis-1.11 generic and update configmap Andy Pitcher 2025-09-26 18:12:44 +0200
  • 385b44813b
    Merge pull request #529 from rancher/renovate/aquasecurity-kube-bench-0.x Paulo Gomes 2025-09-30 06:39:01 +0100
  • 2337eb958d
    Merge pull request #530 from rancher/renovate/github.com-aquasecurity-kube-bench-0.x Paulo Gomes 2025-09-30 06:37:40 +0100
  • 7ac37e4f16
    chore(deps): update module github.com/aquasecurity/kube-bench to v0.13.0 renovate-rancher[bot] 2025-09-30 04:39:01 +0000
  • 2101b50f01
    chore(deps): update dependency aquasecurity/kube-bench to v0.13.0 renovate-rancher[bot] 2025-09-30 04:38:46 +0000
  • f92603cf04
    Merge pull request #527 from krunalhinguu/backport-cis-1.11-0.7 v0.7.2-rc.1 Krunal Hingu 2025-09-25 13:02:26 +0530
  • 0a0c91bb08
    Merge pull request #525 from rancher/renovate/github-actions Paulo Gomes 2025-09-23 09:04:25 +0100
  • 58e536f9cd rke2-cis-1.11 - Generate placeholder files - master: 1.2.30 Ensure that the --service-account-extend-token-expiration parameter is set to false - master: 1.1.20 Ensure that the Kubernetes PKI certificate file permissions are set to 644 or more restrictive (Automated) - Changed from 600 to 644 - Changed from Manual to Automated - node: 4.2.14 Ensure that the --seccomp-default parameter is set to true (Manual) - node: 4.2.4 Verify that if defined, the --read-only-port argument is set to 0 (Automated) - Add 'if defined' - policies: 5.1.1 to 5.1.6 from (Automated) to (Manual) - policies: section titled 'General Policies' was renumbered from 5.7 in v1.10 to 5.6 Andy Pitcher 2025-09-12 19:57:06 +0200
  • 39e70f901b k3s-cis-1.11 - Generate placeholder files - add target mapping and versions - master: 1.2.30 Ensure that the --service-account-extend-token-expiration parameter is set to false - master: 1.2.20 Ensure that the Kubernetes PKI certificate file permissions are set to 644 or more restrictive (Manual) - Changed from 600 to 644 - Changed from Manual to Automated - node: 4.2.14 Ensure that the --seccomp-default parameter is set to true (Manual) - node: 4.2.4 Verify that if defined, the --read-only-port argument is set to 0 (Automated) - Add 'if defined' - policies: 5.1.1 to 5.1.6 from (Automated) to (Manual) - policies: section titled 'General Policies' was renumbered from 5.7 in v1.10 to 5.6 Andy Pitcher 2025-09-10 12:08:16 +0200
  • 0df4a4f76e
    Merge pull request #526 from rancher/renovate/golangci-golangci-lint-2.x Paulo Gomes 2025-09-23 07:37:53 +0100
  • 571ff939d9
    chore(deps): update dependency golangci/golangci-lint to v2.5.0 renovate-rancher[bot] 2025-09-23 04:38:51 +0000
  • 485b22179b
    chore(deps): pin goreleaser/goreleaser-action action to e435ccd renovate-rancher[bot] 2025-09-23 04:38:48 +0000
  • afd6eb09db
    Merge pull request #523 from krunalhinguu/update-release-workflow-v0.7 Krunal Hingu 2025-09-22 10:09:05 +0530
  • c1da15e59f
    Merge pull request #524 from krunalhinguu/update-release-workflow-v0.6 Krunal Hingu 2025-09-22 10:08:47 +0530
  • 100389ba38 create release from workflow Krunal Hingu 2025-09-18 18:47:57 +0530
  • 8cb9ea460d create release from workflow Krunal Hingu 2025-09-18 18:47:57 +0530
  • a4307b2324
    Merge pull request #522 from krunalhinguu/update-release-workflow mitulshah-suse 2025-09-19 10:28:59 +0530
  • af3ace83ea create release from workflow Krunal Hingu 2025-09-18 18:47:57 +0530
  • dda498661d
    Merge pull request #521 from andypitcher/rke2-cis-1.11 Paulo Gomes 2025-09-15 14:33:03 +0100
  • 5c1fbd65ac
    Merge pull request #520 from andypitcher/k3s-cis-1.11 Paulo Gomes 2025-09-15 14:27:34 +0100
  • a007e70ca2
    rke2-cis-1.11 - Generate placeholder files - master: 1.2.30 Ensure that the --service-account-extend-token-expiration parameter is set to false - master: 1.1.20 Ensure that the Kubernetes PKI certificate file permissions are set to 644 or more restrictive (Automated) - Changed from 600 to 644 - Changed from Manual to Automated - node: 4.2.14 Ensure that the --seccomp-default parameter is set to true (Manual) - node: 4.2.4 Verify that if defined, the --read-only-port argument is set to 0 (Automated) - Add 'if defined' - policies: 5.1.1 to 5.1.6 from (Automated) to (Manual) - policies: section titled 'General Policies' was renumbered from 5.7 in v1.10 to 5.6 Andy Pitcher 2025-09-12 19:57:06 +0200
  • 2a527d460b
    k3s-cis-1.11 - Generate placeholder files - add target mapping and versions - master: 1.2.30 Ensure that the --service-account-extend-token-expiration parameter is set to false - master: 1.2.20 Ensure that the Kubernetes PKI certificate file permissions are set to 644 or more restrictive (Manual) - Changed from 600 to 644 - Changed from Manual to Automated - node: 4.2.14 Ensure that the --seccomp-default parameter is set to true (Manual) - node: 4.2.4 Verify that if defined, the --read-only-port argument is set to 0 (Automated) - Add 'if defined' - policies: 5.1.1 to 5.1.6 from (Automated) to (Manual) - policies: section titled 'General Policies' was renumbered from 5.7 in v1.10 to 5.6 Andy Pitcher 2025-09-10 12:08:16 +0200
  • 3d7b5d6d09
    Merge pull request #517 from rancher/renovate/kubernetes-kubernetes-1.x Paulo Gomes 2025-09-10 08:31:32 +0100
  • acaf0f0583
    chore(deps): update dependency kubernetes/kubernetes to v1.34.1 renovate-rancher[bot] 2025-09-10 04:37:18 +0000
  • 7a601b2c76
    Merge pull request #519 from rancher/renovate/registry.suse.com-bci-golang-1.x Paulo Gomes 2025-09-09 09:37:54 +0100
  • f2b4500a13
    Merge pull request #518 from rancher/renovate/github.com-spf13-viper-1.x Paulo Gomes 2025-09-09 09:33:49 +0100
  • b7c298b095
    chore(deps): update registry.suse.com/bci/golang docker tag to v1.25 renovate-rancher[bot] 2025-09-09 04:39:19 +0000
  • f290088b85
    chore(deps): update module github.com/spf13/viper to v1.21.0 renovate-rancher[bot] 2025-09-09 04:39:14 +0000
  • 8749365840
    Merge pull request #516 from rancher/renovate-presets Paulo Gomes 2025-09-04 18:03:32 +0100
  • 35afa22a3c
    renovate: Use preset to align with Rancher Manager versions This aligns with the configuration applied to the operator. The matchBaseBranches has been updated so that it uses regex as opposed to literal names. Paulo Gomes 2025-09-04 12:42:53 +0100
  • 06a6f87a54
    Merge pull request #515 from rancher/renovate/main-major-github-actions Paulo Gomes 2025-09-04 07:32:51 +0100
  • c419794491
    chore(deps): update actions/setup-go action to v6 renovate-rancher[bot] 2025-09-04 04:38:48 +0000
  • 9e9983c6be
    Merge pull request #508 from rancher/renovate/main-github.com-aquasecurity-kube-bench-0.x Paulo Gomes 2025-09-02 08:02:20 +0100
  • abed0b5a44
    Merge pull request #507 from rancher/renovate/main-aquasecurity-kube-bench-0.x Paulo Gomes 2025-09-02 08:00:25 +0100
  • d60adb0c8b
    Merge pull request #506 from rancher/renovate/main-go-github.com-go-viper-mapstructure-v2-vulnerability Andy Pitcher 2025-08-29 11:37:19 +0200
  • 60a859eb66
    Merge pull request #509 from rancher/renovate/main-github.com-stretchr-testify-1.x Andy Pitcher 2025-08-29 11:36:48 +0200
  • 04ce9643ec
    Merge pull request #510 from rancher/renovate/release/v0.4-go-github.com-go-viper-mapstructure-v2-vulnerability release/v0.4 Andy Pitcher 2025-08-29 11:36:32 +0200
  • 8587bb4f63
    Merge pull request #511 from rancher/renovate/release/v0.5-go-github.com-go-viper-mapstructure-v2-vulnerability Andy Pitcher 2025-08-29 11:36:17 +0200
  • e62ff23c5c
    Merge pull request #512 from rancher/renovate/release/v0.6-go-github.com-go-viper-mapstructure-v2-vulnerability Andy Pitcher 2025-08-29 11:35:50 +0200
  • 580ff79206
    Merge pull request #505 from rancher/dependabot/go_modules/github.com/go-viper/mapstructure/v2-2.4.0 Andy Pitcher 2025-08-29 11:34:42 +0200
  • d12c947b6e
    Merge pull request #501 from rancher/renovate/main-golangci-golangci-lint-2.x Andy Pitcher 2025-08-29 11:33:48 +0200
  • af189fe523
    Merge pull request #513 from rancher/renovate/release/v0.7-go-github.com-go-viper-mapstructure-v2-vulnerability Andy Pitcher 2025-08-29 11:32:44 +0200
  • 23663dd342
    Merge pull request #514 from rancher/renovate/main-kubernetes-sigs-kind-0.x Andy Pitcher 2025-08-29 11:32:27 +0200
  • fe4129f41a
    chore(deps): update module github.com/stretchr/testify to v1.11.1 renovate-rancher[bot] 2025-08-28 04:39:48 +0000
  • a21a0fa236
    chore(deps): update dependency kubernetes/kubernetes to v1.34.0 renovate-rancher[bot] 2025-08-28 04:39:28 +0000
  • 551ae9b157
    chore(deps): update dependency kubernetes-sigs/kind to v0.30.0 renovate-rancher[bot] 2025-08-28 04:39:23 +0000
  • 2f94dc7f69
    chore(deps): update module github.com/go-viper/mapstructure/v2 to v2.4.0 [security] renovate-rancher[bot] 2025-08-26 04:41:20 +0000
  • 16b9d90130
    chore(deps): update module github.com/go-viper/mapstructure/v2 to v2.4.0 [security] renovate-rancher[bot] 2025-08-26 04:41:14 +0000
  • 9005dcd38b
    chore(deps): update module github.com/go-viper/mapstructure/v2 to v2.4.0 [security] renovate-rancher[bot] 2025-08-26 04:41:10 +0000
  • b0e367ddff
    chore(deps): update module github.com/go-viper/mapstructure/v2 to v2.4.0 [security] renovate-rancher[bot] 2025-08-26 04:41:05 +0000
  • ef87e2a9f3
    chore(deps): update module github.com/aquasecurity/kube-bench to v0.12.0 renovate-rancher[bot] 2025-08-26 04:40:52 +0000
  • 9f295a1556
    chore(deps): update dependency aquasecurity/kube-bench to v0.12.0 renovate-rancher[bot] 2025-08-26 04:40:35 +0000
  • 722558d9df
    chore(deps): update module github.com/go-viper/mapstructure/v2 to v2.4.0 [security] renovate-rancher[bot] 2025-08-26 04:40:30 +0000
  • 40599128e0
    build(deps): bump github.com/go-viper/mapstructure/v2 dependabot[bot] 2025-08-21 14:54:56 +0000
  • 92e8cac16c
    Merge pull request #502 from krunalhinguu/backport-r5-cis-1.10 v0.5.7-rc.2 v0.5.7 Swastik Gour 2025-08-14 15:13:12 +0530
  • bc30e8edeb
    Merge pull request #503 from krunalhinguu/backport-r6-cis-1.10 v0.6.2-rc.2 v0.6.2 Swastik Gour 2025-08-14 15:12:54 +0530
  • b794a2e1ca Fix check for 5.2.9 using sh syntax Derek Nola 2025-04-07 10:47:31 -0700