---
title: "CIS benchmark report"
description: "Reference for the CIS benchmark compliance report in Calico Enterprise that audits Kubernetes nodes against CIS recommendations."
product: "Calico Enterprise"
version: "3.23 (latest)"
section: "Reference"
canonical_url: "https://docs.tigera.io/calico-enterprise/latest/reference/resources/compliance-reports/cis-benchmark"
---

# CIS benchmark report

To create a CIS benchmark report, create a `GlobalReport` with the `reportType` set to `cis-benchmark`.

The following sample command uses a GlobalReport to create a daily CIS benchmark report that run on all the nodes.

```bash
kubectl apply -f - << EOF
apiVersion: projectcalico.org/v3
kind: GlobalReport
metadata:
  name: daily-cis-benchmark-report
spec:
  reportType: cis-benchmark
  schedule: 0 0 * * *
EOF
```

## OpenShift

While there is no extra setup configuration required by the user to generate a benchmark report for OpenShift, the result sets will be different than a report generated for regular Kubernetes clusters. Use the [OpenShift Container Platform Security Guide](https://static.open-scap.org/ssg-guides/ssg-ocp4-guide-index.html) to cross-reference the benchmark results.

## Downloadable reports

## total-summary.csv

A textual representation of the dashboard.

| Heading                | Description                                                       | Format         |
| ---------------------- | ----------------------------------------------------------------- | -------------- |
| startTime              | The report interval start time.                                   | RFC3339 string |
| endTime                | The report interval start time.                                   | RFC3339 string |
| type                   | The type of benchmark report                                      | string         |
| hiPercentageThreshold  | The percentage of passing tests required to rate a node as high   | int            |
| medPercentageThreshold | The percentage of passing tests required to rate a node as medium | int            |
| hiNodeCount            | The number of nodes rated as high                                 | int            |
| medNodeCount           | The number of nodes rated as medium                               | int            |
| lowNodeCount           | The number of nodes rated as low                                  | int            |

## node-summary.csv

A .csv file of test result summaries per node.

| Heading      | Description                                                                        | Format |
| ------------ | ---------------------------------------------------------------------------------- | ------ |
| node         | The name of the node.                                                              | string |
| version      | The version of the platform.                                                       | string |
| status       | The rating of the node based on percentage of tests passing.                       | string |
| testsPassing | The number of tests passing.                                                       | int    |
| testsFailing | The number of tests failing.                                                       | int    |
| testsUnknown | The number of tests whose results are undetermined due to automation restrictions. | int    |
| testsTotal   | The total number of tests executed.                                                | int    |

### failed-tests.csv

A .csv file of tests that have failed.

| Heading   | Description                                                                            | Format |
| --------- | -------------------------------------------------------------------------------------- | ------ |
| nodeName  | Node where the test is executed.                                                       | string |
| testIndex | Index of the test on the Kubernetes CIS benchmark.                                     | string |
| status    | Test results: PASS, FAIL, INFO.                                                        | string |
| scored    | Indicates whether the Kubernetes CIS benchmark counts this test towards their scoring. | string |

### all-tests.csv

A .csv file with tests that were executed on all nodes. Format remains the same as above.