feat: add CIS-2.0 support - #2126
Merged
Merged
Conversation
This version targets k8s v1.34-v1.35 uses v2.0 patch version ([v2.0.1](https://workbench.cisecurity.org/benchmarks/26831)). Changes are minimal as CIS-1.12 was covering some of them already: - Update etcd 3.2.2: update remediation - Update Master 1.2.29: audit kept, change the remediation wording to match CIS Signed-off-by: Andy Pitcher <andypitcher@linux.com>
andypitcher
marked this pull request as ready for review
July 30, 2026 19:49
Contributor
Author
|
@LaibaBareera @mozillazg @afdesk could you review this PR ? |
LaibaBareera
approved these changes
Aug 18, 2026
Collaborator
There was a problem hiding this comment.
LGTM.
@andypitcher Thanks for your contribution
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Parent issue:
CIS Kubernetes Benchmark CIS-2.0
CIS Workbench: https://workbench.cisecurity.org/benchmarks/26831
K8s version: v1.34 to v1.35
Note about the version: CIS-2.0 is based on the patched version
v2.0.1which just modified a typo in the version scope.Changelog details in CIS Workbench:
All the checks remain the same as
CIS-1.12, their compatibility were all confirmed/validated against the v1.34-v1.35. Below are the checks that received a light remediation update.