2.2. Configuring the ScanSettingBinding object

Prerequisites

• You have installed the Compliance Operator.

Procedure

• To create the ScanSettingBinding object from the CLI, perform the following steps:

  1. Create a file named sscan.yaml by using the following content:

     apiVersion: compliance.openshift.io/v1alpha1
     kind: ScanSettingBinding
     metadata:
       name: cis-compliance
     profiles:
       - name: ocp4-cis-node
         kind: Profile
         apiGroup: compliance.openshift.io/v1alpha1
       - name: ocp4-cis
         kind: Profile
         apiGroup: compliance.openshift.io/v1alpha1
     settingsRef:
       name: default
       kind: ScanSetting
       apiGroup: compliance.openshift.io/v1alpha1

  2. Create the ScanSettingBinding object by running the following command:

     $ oc create -f sscan.yaml -n openshift-compliance

     If successful, the following message is displayed:

     $ scansettingbinding.compliance.openshift.io/cis-compliance created

• To create the ScanSettingBinding object from the UI, perform the following steps:

  1. Change the active project to openshift-compliance.
  2. Click + to open the Import YAML page.
  3. Paste the YAML from the previous example, and then click Create.