Merge pull request #532 from kubescape/cis-aks-hotfix

Use cluster scope instead of AKS
kubescape · Oct 19, 2023 · b9141c0 · b9141c0
2 parents e443617 + ad0448a
commit b9141c0
Show file tree

Hide file tree

Showing 14 changed files with 14 additions and 14 deletions.
diff --git a/controls/C-0239-preferusingdedicatedaksserviceaccounts.json b/controls/C-0239-preferusingdedicatedaksserviceaccounts.json
@@ -19,7 +19,7 @@
     "default_value": "",
     "scanningScope": {
         "matches": [
-            "AKS"
+            "cluster"
         ]
     }
 }
diff --git a/controls/C-0240-ensurenetworkpolicyisenabledandsetasappropriate.json b/controls/C-0240-ensurenetworkpolicyisenabledandsetasappropriate.json
@@ -19,7 +19,7 @@
     "default_value": "By default, Network Policy is disabled.",
     "scanningScope": {
         "matches": [
-            "AKS"
+            "cluster"
         ]
     }
 }
diff --git a/controls/C-0241-useazurerbacforkubernetesauthorization.json b/controls/C-0241-useazurerbacforkubernetesauthorization.json
@@ -17,7 +17,7 @@
     "default_value": "",
     "scanningScope": {
         "matches": [
-            "AKS"
+            "cluster"
         ]
     }
 }
diff --git a/controls/C-0242-hostilemultitenantworkloads.json b/controls/C-0242-hostilemultitenantworkloads.json
@@ -19,7 +19,7 @@
     "default_value": "",
     "scanningScope": {
         "matches": [
-            "AKS"
+            "cluster"
         ]
     }
 }
diff --git a/...ensureimagevulnerabilityscanningusingazuredefenderimagescanningorathirdpartyprovider.json b/...ensureimagevulnerabilityscanningusingazuredefenderimagescanningorathirdpartyprovider.json
@@ -19,7 +19,7 @@
     "default_value": "Images are not scanned by Default.",
     "scanningScope": {
         "matches": [
-            "AKS"
+            "cluster"
         ]
     }
 }
diff --git a/controls/C-0244-ensurekubernetessecretsareencrypted.json b/controls/C-0244-ensurekubernetessecretsareencrypted.json
@@ -19,7 +19,7 @@
     "default_value": "",
     "scanningScope": {
         "matches": [
-            "AKS"
+            "cluster"
         ]
     }
 }
diff --git a/controls/C-0245-encrypttraffictohttpsloadbalancerswithtlscertificates.json b/controls/C-0245-encrypttraffictohttpsloadbalancerswithtlscertificates.json
@@ -19,7 +19,7 @@
     "default_value": "",
     "scanningScope": {
         "matches": [
-            "AKS"
+            "cluster"
         ]
     }
 }
diff --git a/controls/C-0247-restrictaccesstothecontrolplaneendpoint.json b/controls/C-0247-restrictaccesstothecontrolplaneendpoint.json
@@ -19,7 +19,7 @@
     "default_value": "By default, Endpoint Private Access is disabled.",
     "scanningScope": {
         "matches": [
-            "AKS"
+            "cluster"
         ]
     }
 }
diff --git a/controls/C-0248-ensureclustersarecreatedwithprivatenodes.json b/controls/C-0248-ensureclustersarecreatedwithprivatenodes.json
@@ -19,7 +19,7 @@
     "default_value": "",
     "scanningScope": {
         "matches": [
-            "AKS"
+            "cluster"
         ]
     }
 }
diff --git a/controls/C-0249-restrictuntrustedworkloads.json b/controls/C-0249-restrictuntrustedworkloads.json
@@ -20,7 +20,7 @@
     "default_value": "ACI is not a default component of the AKS",
     "scanningScope": {
         "matches": [
-            "AKS"
+            "cluster"
         ]
     }
 }
diff --git a/controls/C-0250-minimizeclusteraccesstoreadonlyforazurecontainerregistryacr.json b/controls/C-0250-minimizeclusteraccesstoreadonlyforazurecontainerregistryacr.json
@@ -19,7 +19,7 @@
   "default_value": "",
   "scanningScope": {
     "matches": [
-      "AKS"
+      "cluster"
     ]
   }
 }
diff --git a/...ols/C-0252-ensureclustersarecreatedwithprivateendpointenabledandpublicaccessdisabled.json b/...ols/C-0252-ensureclustersarecreatedwithprivateendpointenabledandpublicaccessdisabled.json
@@ -19,7 +19,7 @@
     "default_value": "",
     "scanningScope": {
         "matches": [
-            "AKS"
+            "cluster"
         ]
     }
 }
diff --git a/controls/C-0254-enableauditlogs.json b/controls/C-0254-enableauditlogs.json
@@ -19,7 +19,7 @@
     "default_value": "By default, cluster control plane logs aren't sent to be Logged.",
     "scanningScope": {
         "matches": [
-            "AKS"
+            "cluster"
         ]
     }
 }
diff --git a/frameworks/cis-aks-t1.2.0.json b/frameworks/cis-aks-t1.2.0.json
@@ -7,7 +7,7 @@
     },
     "scanningScope": {
         "matches": [
-            "AKS"
+            "cluster"
         ]
     },
     "typeTags": ["compliance"],