fix: update appVersion and image tag for cis

chart/Chart.yaml

@@ -12,11 +12,11 @@ annotations:
   catalog.cattle.io/type: cluster-tool
   catalog.cattle.io/ui-component: rancher-cis-benchmark
 apiVersion: v1
-appVersion: v7.5.0
+appVersion: v7.6.0-rc.1
 description: The cis-operator enables running CIS benchmark security scans on a kubernetes
   cluster
 icon: https://charts.rancher.io/assets/logos/cis-kube-bench.svg
 keywords:
 - security
 name: rancher-cis-benchmark
-version: 7.5.0
+version: 7.6.0-rc.1

chart/templates/benchmark-cis-1.10.yaml

@@ -0,0 +1,8 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanBenchmark
+metadata:
+  name: cis-1.10
+spec:
+  clusterProvider: ""
+  minKubernetesVersion: "1.28.0"

chart/templates/benchmark-cis-1.9.yaml

@@ -6,3 +6,4 @@ metadata:
 spec:
   clusterProvider: ""
   minKubernetesVersion: "1.27.0"
+  maxKubernetesVersion: "1.27.x"

chart/templates/benchmark-k3s-cis-1.10.yaml

@@ -0,0 +1,8 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanBenchmark
+metadata:
+  name: k3s-cis-1.10
+spec:
+  clusterProvider: k3s
+  minKubernetesVersion: "1.28.0"

chart/templates/benchmark-k3s-cis-1.9.yaml

@@ -6,3 +6,4 @@ metadata:
 spec:
   clusterProvider: k3s
   minKubernetesVersion: "1.27.0"
+  maxKubernetesVersion: "1.27.x"

chart/templates/benchmark-rke2-cis-1.10.yaml

@@ -0,0 +1,8 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanBenchmark
+metadata:
+  name: rke2-cis-1.10
+spec:
+  clusterProvider: rke2
+  minKubernetesVersion: "1.28.0"

chart/templates/benchmark-rke2-cis-1.9.yaml

@@ -6,3 +6,4 @@ metadata:
 spec:
   clusterProvider: rke2
   minKubernetesVersion: "1.27.0"
+  maxKubernetesVersion: "1.27.x"

chart/templates/configmap.yaml

@@ -10,9 +10,9 @@ data:
     >=1.21.0: rke-profile-permissive-1.8
   rke2: |-
     <1.21.0: rke2-cis-1.20-profile-permissive
-    >=1.21.0: rke2-cis-1.9-profile
+    >=1.21.0: rke2-cis-1.10-profile
   eks: "eks-profile-1.5.0"
   gke: "gke-profile-1.6.0"
   aks: "aks-profile"
-  k3s: "k3s-cis-1.9-profile"
-  default: "cis-1.9-profile"
+  k3s: "k3s-cis-1.10-profile"
+  default: "cis-1.10-profile"

chart/templates/scanprofile-cis-1.10.yaml

@@ -0,0 +1,9 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanProfile
+metadata:
+  name: cis-1.10-profile
+  annotations:
+    clusterscanprofile.cis.cattle.io/builtin: "true"
+spec:
+  benchmarkVersion: cis-1.10

chart/templates/scanprofile-k3s-cis-1.10.yaml

@@ -0,0 +1,9 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanProfile
+metadata:
+  name: k3s-cis-1.10-profile
+  annotations:
+    clusterscanprofile.cis.cattle.io/builtin: "true"
+spec:
+  benchmarkVersion: k3s-cis-1.10

chart/templates/scanprofile-rke2-cis-1.10.yaml

@@ -0,0 +1,9 @@
+---
+apiVersion: cis.cattle.io/v1
+kind: ClusterScanProfile
+metadata:
+  name: rke2-cis-1.10-profile
+  annotations:
+    clusterscanprofile.cis.cattle.io/builtin: "true"
+spec:
+  benchmarkVersion: rke2-cis-1.10

chart/values.yaml

@@ -5,10 +5,10 @@
 image:
   cisoperator:
     repository: rancher/cis-operator
-    tag: v1.3.8
+    tag: v1.3.9-rc.1
   securityScan:
     repository: rancher/security-scan
-    tag: v0.5.6
+    tag: v0.5.7-rc.2
   sonobuoy:
     repository: rancher/mirrored-sonobuoy-sonobuoy
     tag: v0.57.3

tests/k3s-bench-test.yaml

@@ -4,5 +4,5 @@ metadata:
   name: k3s-e2e-scan
   namespace: cis-operator-system
 spec:
-  scanProfileName: k3s-cis-1.9-profile
+  scanProfileName: k3s-cis-1.10-profile
   scoreWarning: pass