Skip to content

Latest commit

 

History

History

pci-dss-v3.2.1

Folders and files

NameName
Last commit message
Last commit date

parent directory

..
.krmignore
.krmignore
 
 
1.1.4_resources-have-required-labels.yaml
1.1.4_resources-have-required-labels.yaml
 
 
1.1.5-2.4_apps-must-have-certain-set-of-annotations.yaml
1.1.5-2.4_apps-must-have-certain-set-of-annotations.yaml
 
 
1.2.2_8.1.2_enforce-managed-by-configmanagement-label.yaml
1.2.2_8.1.2_enforce-managed-by-configmanagement-label.yaml
 
 
1.2_require-namespace-network-policies.yaml
1.2_require-namespace-network-policies.yaml
 
 
10.4.1-10.4.3_nodes-have-consistent-time.yaml
10.4.1-10.4.3_nodes-have-consistent-time.yaml
 
 
2.1_block-creation-with-default-serviceaccount.yaml
2.1_block-creation-with-default-serviceaccount.yaml
 
 
2.1_restrict-default-namespace.yaml
2.1_restrict-default-namespace.yaml
 
 
4.1_asm-peer-authn-strict-mtls.yaml
4.1_asm-peer-authn-strict-mtls.yaml
 
 
5.1.1_5.3-require-av-daemonset.yaml
5.1.1_5.3-require-av-daemonset.yaml
 
 
5.3_6.1_6.4_enforce-config-management.yaml
5.3_6.1_6.4_enforce-config-management.yaml
 
 
6.5_6.6_enforce-cloudarmor-backendconfig.yaml
6.5_6.6_enforce-cloudarmor-backendconfig.yaml
 
 
8.1.5_8.2.3_8.5_block-secrets-of-type-basic-auth.yaml
8.1.5_8.2.3_8.5_block-secrets-of-type-basic-auth.yaml
 
 
Kptfile
Kptfile
 
 
README.md
README.md
 
 
kustomization.yaml
kustomization.yaml
 
 

README.md

PCI DSS v3.2.1

Note: The PCI DSS v3.2.1 policy bundle is deprecated. Please migrate to the PCI DSS v4.0 policy bundle.

Description

Use the PCI DSS v3.2.1 policy bundle with Policy Controller to evaluate the compliance of your cluster resources against some aspects of the PCI Data Security Standard v3.2.1.

The PCI DSS standards document provides more details about the controls targeted by this policy bundle.

Compatibility

This bundle requires Policy Controller version 1.14.3 or higher.

Usage

(Optional) Preview the policy constraints with kubectl:

kubectl kustomize https://github.com/GoogleCloudPlatform/gke-policy-library.git/anthos-bundles/pci-dss-v3.2.1

Apply the policy constraints with kubectl:

kubectl apply -k https://github.com/GoogleCloudPlatform/gke-policy-library.git/anthos-bundles/pci-dss-v3.2.1

For more information visit:

https://cloud.google.com/anthos-config-management/docs/how-to/using-pci-dss-v3