Install Rancher CIS Benchmark

  1. In the upper left corner, click ☰ > Cluster Management.
  2. On the Clusters page, go to the cluster where you want to install CIS Benchmark and click Explore.
  3. In the left navigation bar, click Apps > Charts.
  4. Click CIS Benchmark
  5. Click Install.

Result: The CIS scan application is deployed on the Kubernetes cluster.

Install Rancher CIS Benchmark - 图1note

If you are running Kubernetes v1.24 or earlier, and have a Pod Security Policy (PSP) hardened cluster, CIS Benchmark 4.0.0 and later disable PSPs by default. To install CIS Benchmark on a PSP-hardened cluster, set global.psp.enabled to true in the values before installing the chart. Pod Security Admission (PSA) hardened clusters aren’t affected.