-
Notifications
You must be signed in to change notification settings - Fork 258
Add CIS Kubernetes Benchmark documentation for AWS, Azure, and Google Cloud #16753
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
Documentation ReviewI've reviewed the changes in this PR. The new CIS Kubernetes documentation follows the existing patterns well, but there are a few issues that need to be addressed: Issues to Fix1. Missing trailing newlines
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Pull request overview
This PR adds comprehensive documentation for the CIS Kubernetes Benchmark compliance policy packs across three major cloud providers: AWS (EKS), Azure (AKS), and Google Cloud (GKE). The documentation provides detailed policy listings for managed Kubernetes services, helping organizations implement industry-recognized security best practices for container orchestration platforms.
- Added three new policy pack documentation pages with complete policy listings
- Updated the pre-built policy packs overview table to include CIS Kubernetes
- Configured navigation menu structure to accommodate the new CIS Kubernetes section
Reviewed changes
Copilot reviewed 5 out of 5 changed files in this pull request and generated no comments.
Show a summary per file
| File | Description |
|---|---|
| content/docs/reference/pre-built-policy-packs/cis-kubernetes/aws.md | New documentation page listing all 27 CIS Kubernetes Benchmark policies for AWS EKS, covering audit logging, node configuration, RBAC controls, pod security, secrets management, and network policies |
| content/docs/reference/pre-built-policy-packs/cis-kubernetes/azure.md | New documentation page listing all 30 CIS Kubernetes Benchmark policies for Azure AKS, covering cluster logging, RBAC controls, pod security, network policies, image scanning, and Azure AD integration |
| content/docs/reference/pre-built-policy-packs/cis-kubernetes/google-cloud.md | New documentation page listing all 50 CIS Kubernetes Benchmark policies for Google Cloud GKE, covering RBAC controls, pod security, Binary Authorization, Workload Identity, secrets encryption, network configuration, and GKE-specific security features |
| content/docs/insights/policy/policy-packs/pre-built-packs.md | Added CIS Kubernetes row to the available policy packs table with links to all three cloud provider documentation pages |
| config/_default/menus.yml | Added CIS Kubernetes menu entry and incremented weights for subsequent policy pack menu items (HITRUST, NIST, PCI DSS, Pulumi Best Practices) to maintain proper navigation order |
|
Your site preview for commit 972bc74 is ready! 🎉 http://www-testing-pulumi-docs-origin-pr-16753-972bc746.s3-website.us-west-2.amazonaws.com. |
Added new information for CIS Kube and cloud providers.