When trying to compliant with ocp4-moderate profile and ocp4-cis profile, we see there's a compliance remediation in ocp4-moderate showing:

spec:
  apply: false
  current:
    object:
      apiVersion: config.openshift.io/v1
      kind: APIServer
      metadata:
        name: cluster
      spec:
        audit:
          profile: WriteRequestBodies

And a compliance remediation showing:

  current:
    object:
      apiVersion: config.openshift.io/v1
      kind: APIServer
      metadata:
        name: cluster
      spec:
        audit:
          profile: Default

I suggest to set both similar so as to avoid any contradiction. It's not a severe issue since in general the ocp4-cis rule will not fail if the remediation in moderate is applied.

But it's confusing for the customers.

1.
2.
3.