{"id":19704640,"url":"https://github.com/luckylittle/ansible-role-openshift4-cis","last_synced_at":"2026-03-15T01:22:05.591Z","repository":{"id":109044843,"uuid":"248608727","full_name":"luckylittle/ansible-role-openshift4-cis","owner":"luckylittle","description":"CIS Kubernetes Benchmark 1.5.1 tailored to Red Hat OpenShift v4","archived":false,"fork":false,"pushed_at":"2022-10-12T06:54:11.000Z","size":990,"stargazers_count":3,"open_issues_count":0,"forks_count":2,"subscribers_count":1,"default_branch":"master","last_synced_at":"2025-04-05T17:51:11.745Z","etag":null,"topics":["ansible","ansible-hardening-role","ansible-role","cis","hardening","kubernetes","kubernetes-hardening","openshift","openshift-hardening","openshift4","openshift4-cis"],"latest_commit_sha":null,"homepage":null,"language":null,"has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/luckylittle.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":".github/FUNDING.yml","license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null},"funding":{"github":"luckylittle","patreon":null,"open_collective":null,"ko_fi":null,"tidelift":null,"community_bridge":null,"liberapay":null,"issuehunt":null,"otechie":null,"lfx_crowdfunding":null,"custom":null}},"created_at":"2020-03-19T21:28:43.000Z","updated_at":"2023-02-09T21:04:02.000Z","dependencies_parsed_at":null,"dependency_job_id":"faa8f5ba-70c6-4fb3-8a18-c49df8e6f558","html_url":"https://github.com/luckylittle/ansible-role-openshift4-cis","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/luckylittle%2Fansible-role-openshift4-cis","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/luckylittle%2Fansible-role-openshift4-cis/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/luckylittle%2Fansible-role-openshift4-cis/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/luckylittle%2Fansible-role-openshift4-cis/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/luckylittle","download_url":"https://codeload.github.com/luckylittle/ansible-role-openshift4-cis/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":251519146,"owners_count":21602281,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["ansible","ansible-hardening-role","ansible-role","cis","hardening","kubernetes","kubernetes-hardening","openshift","openshift-hardening","openshift4","openshift4-cis"],"created_at":"2024-11-11T21:23:44.666Z","updated_at":"2026-03-15T01:22:05.582Z","avatar_url":"https://github.com/luckylittle.png","language":null,"funding_links":["https://github.com/sponsors/luckylittle"],"categories":[],"sub_categories":[],"readme":"WIP -- ansible-role-openshift4-cis\n=========\n\nBased on [CIS Kubernetes Benchmark v1.5.1](docs/CIS_Kubernetes_Benchmark_v1.5.1.pdf) [14 Feb 2020].\n\nRequirements\n------------\n\nTested on ansible `2.9.4`. It also requires `kubectl` for the category `5` tasks.\n\nRole Variables\n--------------\n\n* `scored`\n* `not_scored`\n* `level_1`\n* `level_2`\n* `path_to_cni_files`\n* `proxy_kubeconfig_file`\n* `client_ca_file`\n* `kubelet_config`\n\nDependencies\n------------\n\nUnknown at the moment\n\nExample Playbook\n----------------\n\nIncluding an example of how to use your role (for instance, with variables passed in as parameters) is always nice for users too:\n\n* `requirements.yml`:\n\n```yaml\n- src: https://github.com/luckylittle/ansible-role-openshift4-cis\n  version: master\n```\n\n* `playbook.yaml`:\n\n```yaml\n- hosts: all\n  remote_user: core\n  roles:\n    - ansible-role-openshift4-cis\n```\n\n* Execution:\n\n```bash\nansible-galaxy install --force -r requirements.yml -p roles/\nansible-playbook -i inventory\n```\n\nThe `inventory` must contain specific host groups, that the role relies on:\n\n```ini\n[localhost]\nlocalhost\n\n[masters]\nmaster[0:2]\n\n[etcd:children]\nmasters\n\n[workers]\nworker[0:4]\n```\n\nLicense\n-------\n\nMIT\n\nAuthor Information\n------------------\n\nLucian Maly \u003c\u003clucian@redhat.com\u003e\u003e\n\nSome inspiration from [this source](https://github.com/aquasecurity/kube-bench/tree/5f34058dc789e481ccc3b49248ebb02763bdce40/cfg/rh-0.7) was used.\n\n---\n\n_Last update: Mon Mar 30 04:25:20 UTC 2020_\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fluckylittle%2Fansible-role-openshift4-cis","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fluckylittle%2Fansible-role-openshift4-cis","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fluckylittle%2Fansible-role-openshift4-cis/lists"}