You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: modules/compliance-new-tailored-profiles.adoc
+16-9Lines changed: 16 additions & 9 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -6,15 +6,15 @@
6
6
[id="compliance-new-tailored-profiles_{context}"]
7
7
= Creating a new tailored profile
8
8
9
-
You can write a tailored profile from scratch using the `TailoredProfile` object. Set an appropriate `title` and `description` and leave the `extends` field empty. Indicate to the Compliance Operator what type of scan will this custom profile generate:
9
+
You can write a tailored profile from scratch by using the `TailoredProfile` object. Set an appropriate `title` and `description` and leave the `extends` field empty. Indicate to the Compliance Operator what type of scan this custom profile will generate:
10
10
11
11
* Node scan: Scans the Operating System.
12
-
* Platform scan: Scans the OpenShift configuration.
12
+
* Platform scan: Scans the {product-title} configuration.
13
13
14
14
.Procedure
15
15
16
-
Set the following annotation on the `TailoredProfile` object:
17
-
+
16
+
* Set the following annotation on the `TailoredProfile` object:
17
+
18
18
.Example `new-profile.yaml`
19
19
[source,yaml]
20
20
----
@@ -25,13 +25,20 @@ metadata:
25
25
annotations:
26
26
compliance.openshift.io/product-type: Node <1>
27
27
spec:
28
-
extends:
29
-
description: My custom profile <2>
30
-
title: Custom profile <3>
28
+
extends: ocp4-cis-node <2>
29
+
description: My custom profile <3>
30
+
title: Custom profile <4>
31
+
enableRules:
32
+
- name: ocp4-etcd-unique-ca
33
+
rationale: We really need to enable this
34
+
disableRules:
35
+
- name: ocp4-file-groupowner-cni-conf
36
+
rationale: This does not apply to the cluster
31
37
----
32
38
<1> Set `Node` or `Platform` accordingly.
33
-
<2> Use the `description` field to describe the function of the new `TailoredProfile` object.
34
-
<3> Give your `TailoredProfile` object a title with the `title` field.
39
+
<2> The `extends` field is optional.
40
+
<3> Use the `description` field to describe the function of the new `TailoredProfile` object.
41
+
<4> Give your `TailoredProfile` object a title with the `title` field.
0 commit comments