Skip to content

Latest commit

 

History

History

pci-dss-v4.0

Folders and files

NameName
Last commit message
Last commit date

parent directory

..
.krmignore
.krmignore
 
 
Kptfile
Kptfile
 
 
README.md
README.md
 
 
kustomization.yaml
kustomization.yaml
 
 
require-apps-annotations.yaml
require-apps-annotations.yaml
 
 
require-av-daemonset.yaml
require-av-daemonset.yaml
 
 
require-binauthz.yaml
require-binauthz.yaml
 
 
require-cloudarmor-backendconfig.yaml
require-cloudarmor-backendconfig.yaml
 
 
require-config-management.yaml
require-config-management.yaml
 
 
require-default-deny-network-policies.yaml
require-default-deny-network-policies.yaml
 
 
require-managed-by-label.yaml
require-managed-by-label.yaml
 
 
require-namespace-network-policies.yaml
require-namespace-network-policies.yaml
 
 
require-peer-authentication-strict-mtls.yaml
require-peer-authentication-strict-mtls.yaml
 
 
require-valid-network-ranges.yaml
require-valid-network-ranges.yaml
 
 
resources-have-required-labels.yaml
resources-have-required-labels.yaml
 
 
restrict-cluster-admin-role.yaml
restrict-cluster-admin-role.yaml
 
 
restrict-creation-with-default-serviceaccount.yaml
restrict-creation-with-default-serviceaccount.yaml
 
 
restrict-default-namespace.yaml
restrict-default-namespace.yaml
 
 
restrict-ingress.yaml
restrict-ingress.yaml
 
 
restrict-node-image.yaml
restrict-node-image.yaml
 
 
restrict-pods-exec.yaml
restrict-pods-exec.yaml
 
 
restrict-rbac-subjects.yaml
restrict-rbac-subjects.yaml
 
 
restrict-role-wildcards.yaml
restrict-role-wildcards.yaml
 
 
restrict-storageclass.yaml
restrict-storageclass.yaml
 
 

README.md

PCI DSS v4.0

Description

Use the PCI DSS v4.0 policy bundle with Policy Controller to evaluate the compliance of your cluster resources against some aspects of the PCI Data Security Standard v4.0.

The PCI DSS standards document provides more details about the controls targeted by this policy bundle.

Compatibility

This bundle requires Policy Controller version v1.16.0 or higher.

Usage

(Optional) Preview the policy constraints with kubectl:

kubectl kustomize https://github.com/GoogleCloudPlatform/gke-policy-library.git/anthos-bundles/pci-dss-v4.0

Apply the policy constraints with kubectl:

kubectl apply -k https://github.com/GoogleCloudPlatform/gke-policy-library.git/anthos-bundles/pci-dss-v4.0

For more information visit:

https://cloud.google.com/anthos-config-management/docs/how-to/using-pci-dss-v4