https://github.com/complianceascode/kube-oscal-cd
https://github.com/complianceascode/kube-oscal-cd
Last synced: 5 months ago
JSON representation
- Host: GitHub
- URL: https://github.com/complianceascode/kube-oscal-cd
- Owner: ComplianceAsCode
- Created: 2023-03-21T16:38:34.000Z (about 3 years ago)
- Default Branch: master
- Last Pushed: 2024-05-01T18:57:10.000Z (about 2 years ago)
- Last Synced: 2024-12-31T14:26:24.410Z (over 1 year ago)
- Language: Makefile
- Size: 1.13 MB
- Stars: 1
- Watchers: 7
- Forks: 1
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- Codeowners: CODEOWNERS
Awesome Lists containing this project
README
# kube-oscal-cd
Kube OSCAL component definition
### overview
This repo comprises the Kubernetes & Kyverno component definition specified as a compliance-[trestle](https://github.com/IBM/compliance-trestle) standard [component-definition-kube.csv](data/component-definition-kube.csv) file.
To create the OSCAL [component-definition.json](component-definitions/kube/component-definition.json) file from the component-definition-kube.csv file, download this repo then run `make`.
See console shown below.
The resolved profile used is [NIST_SP-800-53_rev5_HIGH](catalogs/NIST_SP-800-53_rev5_HIGH/NIST_SP-800-53_rev5_HIGH-baseline-resolved-profile_catalog.json).
### console
```
make
echo "=> venv"
=> venv
if [ ! -d /tmp/venv.kube-cd ]; then \
echo "=> create python virtual environment"; \
python -m venv /tmp/venv.kube-cd; \
source /tmp/venv.kube-cd/bin/activate; \
echo "=> install prereqs"; \
python -m pip install -q --upgrade pip setuptools; \
python -m pip install -q git+https://github.com/IBM/compliance-trestle.git@develop; \
fi
=> create python virtual environment
=> install prereqs
echo "=> trestle-init"
=> trestle-init
source /tmp/venv.kube-cd/bin/activate; \
trestle init
Initialized trestle project successfully in /home/degenaro/git/X
echo "=> kube-cd"
=> kube-cd
source /tmp/venv.kube-cd/bin/activate; \
trestle task csv-to-oscal-cd -c data/csv-to-oscal-cd.config
input: data/component-definition-kube.csv
output: component-definitions/kube/component-definition.json
Task: csv-to-oscal-cd executed successfully.
```