CIS Kubernetes v1.20 Benchmark v1.0.0 L2 Master

This audit file has been deprecated and will be removed in a future update.

Name: CIS Kubernetes v1.20 Benchmark v1.0.0 L2 Master

Updated: 12/7/2022

Authority: CIS

Plugin: Unix

Revision: 1.3

Estimated Item Count: 13

Filename: CIS_Kubernetes_v1.20_v1.0.0_Level_2_Master.audit

Size: 39.2 kB

MD5: e1a52f0dc5ba3bb0804ca0c15432781e

SHA256: 440711502884d04a3668bb12f14fdb2197177b94d8af8da3c830e88ea38d0c37

Description	Categories
1.3.6 Ensure that the RotateKubeletServerCertificate argument is set to true	CONFIGURATION MANAGEMENT
2.7 Ensure that a unique Certificate Authority is used for etcd	ACCESS CONTROL
3.2.2 Ensure that the audit policy covers key security concerns	AUDIT AND ACCOUNTABILITY
5.2.6 Minimize the admission of root containers	CONFIGURATION MANAGEMENT
5.2.9 Minimize the admission of containers with capabilities assigned	CONFIGURATION MANAGEMENT
5.3.2 Ensure that all Namespaces have Network Policies defined	SYSTEM AND COMMUNICATIONS PROTECTION
5.4.1 Prefer using secrets as files over secrets as environment variables	CONFIGURATION MANAGEMENT
5.4.2 Consider external secret storage	MEDIA PROTECTION
5.5.1 Configure Image Provenance using ImagePolicyWebhook admission controller	CONFIGURATION MANAGEMENT
5.7.2 Ensure that the seccomp profile is set to docker/default in your pod definitions	CONFIGURATION MANAGEMENT
5.7.3 Apply Security Context to Your Pods and Containers	CONFIGURATION MANAGEMENT
5.7.4 The default namespace should not be used	ACCESS CONTROL
CIS_Kubernetes_v1.20_v1.0.0_Level_2_Master.audit from CIS Kubernetes v1.20 Benchmark v1.0.0	CONFIGURATION MANAGEMENT