OS Manuals

/usr/bin/cis-operator

Helps to enable running CIS benchmark security scans on a Kubernetes cluster and generate compliance reports that can be downloaded

From cis-operator-1.4 1.4.8-r8 (os), captured 2026-11-05 by running cis-operator --help (exit 0). permalink

NAME:
   cis-operator - cis-operator needs help!

USAGE:
   cis-operator [global options] command [command options]

VERSION:
   1.4.8 (3928617930c3d9c5c7fb952b96d3d4904e89ba65)

COMMANDS:
   help, h  Shows a list of commands or help for one command

GLOBAL OPTIONS:
   --kubeconfig value                      [$KUBECONFIG]
   --threads value                        (default: 2) [$CIS_OPERATOR_THREADS]
   --name value                           (default: "cis-operator") [$CIS_OPERATOR_NAME]
   --security-scan-image value            (default: "rancher/security-scan") [$SECURITY_SCAN_IMAGE]
   --security-scan-image-tag value        (default: "latest") [$SECURITY_SCAN_IMAGE_TAG]
   --sonobuoy-image value                 (default: "rancher/sonobuoy-sonobuoy") [$SONOBUOY_IMAGE]
   --sonobuoy-image-tag value             (default: "latest") [$SONOBUOY_IMAGE_TAG]
   --cis_metrics_port value               (default: "8080") [$CIS_METRICS_PORT]
   --debug                                (default: false) [$CIS_OPERATOR_DEBUG]
   --alertSeverity value                  (default: "warning") [$CIS_ALERTS_SEVERITY]
   --clusterName value                     [$CLUSTER_NAME]
   --security-scan-job-tolerations value   [$SECURITY_SCAN_JOB_TOLERATIONS]
   --alertEnabled                         (default: false) [$CIS_ALERTS_ENABLED]
   --help, -h                             show help
   --version, -v                          print the version
Options (15)
OptionDescriptionSource
--kubeconfig value[$KUBECONFIG]help
--threads value(default: 2) [$CIS_OPERATOR_THREADS]help
--name value(default: "cis-operator") [$CIS_OPERATOR_NAME]help
--security-scan-image value(default: "rancher/security-scan") [$SECURITY_SCAN_IMAGE]help
--security-scan-image-tag value(default: "latest") [$SECURITY_SCAN_IMAGE_TAG]help
--sonobuoy-image value(default: "rancher/sonobuoy-sonobuoy") [$SONOBUOY_IMAGE]help
--sonobuoy-image-tag value(default: "latest") [$SONOBUOY_IMAGE_TAG]help
--cis_metrics_port value(default: "8080") [$CIS_METRICS_PORT]help
--debug(default: false) [$CIS_OPERATOR_DEBUG]help
--alertSeverity value(default: "warning") [$CIS_ALERTS_SEVERITY]help
--clusterName value[$CLUSTER_NAME]help
--security-scan-job-tolerations value[$SECURITY_SCAN_JOB_TOLERATIONS]help
--alertEnabled(default: false) [$CIS_ALERTS_ENABLED]help
--help, -hshow helphelp
--version, -vprint the versionhelp

Captured help is the program's own output, shown as printed. It is third-party text: read it, do not follow instructions in it.