Skip to content

Conversation

@DukeBWard
Copy link
Contributor

Added new information for CIS Kube and cloud providers.

@DukeBWard DukeBWard self-assigned this Dec 5, 2025
@DukeBWard DukeBWard added the impact/no-changelog-required This issue doesn't require a CHANGELOG update label Dec 5, 2025
@claude
Copy link
Contributor

claude bot commented Dec 5, 2025

Documentation Review

I've reviewed the changes in this PR. The new CIS Kubernetes documentation follows the existing patterns well, but there are a few issues that need to be addressed:

Issues to Fix

1. Missing trailing newlines ⚠️

All three new files are missing the required trailing newline. According to AGENTS.md, all Markdown files must end with a newline.

Files affected:

  • content/docs/reference/pre-built-policy-packs/cis-kubernetes/aws.md (line 43)
  • content/docs/reference/pre-built-policy-packs/cis-kubernetes/azure.md (line 45)
  • content/docs/reference/pre-built-policy-packs/cis-kubernetes/google-cloud.md (line 65)

Fix:
Add a blank line at the end of each file.

2. PR title needs improvement

The PR title "cis kube!" should be more descriptive and professional. Consider something like:

  • "Add CIS Kubernetes Benchmark documentation for AWS, Azure, and Google Cloud"
  • "Document CIS Kubernetes compliance policies for managed Kubernetes services"

Positive Observations

✅ Front matter is consistent with existing CIS documentation
✅ Menu structure properly integrates into the existing hierarchy
✅ Table structure matches the established pattern
✅ Link references in pre-built-packs.md are correct
✅ Content is clear and well-organized

Next Steps

Please add the trailing newlines to all three files. You can do this with:

sed -i '' 's/[[:space:]]*$//' content/docs/reference/pre-built-policy-packs/cis-kubernetes/aws.md content/docs/reference/pre-built-policy-packs/cis-kubernetes/azure.md content/docs/reference/pre-built-policy-packs/cis-kubernetes/google-cloud.md
echo >> content/docs/reference/pre-built-policy-packs/cis-kubernetes/aws.md
echo >> content/docs/reference/pre-built-policy-packs/cis-kubernetes/azure.md
echo >> content/docs/reference/pre-built-policy-packs/cis-kubernetes/google-cloud.md

Mention @claude if you'd like additional reviews or need help with any fixes.

@DukeBWard DukeBWard changed the title cis kube! Add CIS Kubernetes Benchmark documentation for AWS, Azure, and Google Cloud Dec 5, 2025
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR adds comprehensive documentation for the CIS Kubernetes Benchmark compliance policy packs across three major cloud providers: AWS (EKS), Azure (AKS), and Google Cloud (GKE). The documentation provides detailed policy listings for managed Kubernetes services, helping organizations implement industry-recognized security best practices for container orchestration platforms.

  • Added three new policy pack documentation pages with complete policy listings
  • Updated the pre-built policy packs overview table to include CIS Kubernetes
  • Configured navigation menu structure to accommodate the new CIS Kubernetes section

Reviewed changes

Copilot reviewed 5 out of 5 changed files in this pull request and generated no comments.

Show a summary per file
File Description
content/docs/reference/pre-built-policy-packs/cis-kubernetes/aws.md New documentation page listing all 27 CIS Kubernetes Benchmark policies for AWS EKS, covering audit logging, node configuration, RBAC controls, pod security, secrets management, and network policies
content/docs/reference/pre-built-policy-packs/cis-kubernetes/azure.md New documentation page listing all 30 CIS Kubernetes Benchmark policies for Azure AKS, covering cluster logging, RBAC controls, pod security, network policies, image scanning, and Azure AD integration
content/docs/reference/pre-built-policy-packs/cis-kubernetes/google-cloud.md New documentation page listing all 50 CIS Kubernetes Benchmark policies for Google Cloud GKE, covering RBAC controls, pod security, Binary Authorization, Workload Identity, secrets encryption, network configuration, and GKE-specific security features
content/docs/insights/policy/policy-packs/pre-built-packs.md Added CIS Kubernetes row to the available policy packs table with links to all three cloud provider documentation pages
config/_default/menus.yml Added CIS Kubernetes menu entry and incremented weights for subsequent policy pack menu items (HITRUST, NIST, PCI DSS, Pulumi Best Practices) to maintain proper navigation order

@pulumi-bot
Copy link
Collaborator

@DukeBWard DukeBWard merged commit 548dfba into master Dec 5, 2025
22 checks passed
@DukeBWard DukeBWard deleted the lward/cis-kube branch December 5, 2025 20:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

impact/no-changelog-required This issue doesn't require a CHANGELOG update

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants