CIS Kubernetes 1.11 Benchmark v1.3.0 L2

Name: CIS Kubernetes 1.11 Benchmark v1.3.0 L2

Updated: 6/17/2024

Authority: CIS

Plugin: Unix

Revision: 1.14

Estimated Item Count: 12

Filename: CIS_Kubernetes_v1.3.0_Level_2.audit

Size: 22.5 kB

MD5: 3810b0123366e3623f96613d78d617d3

SHA256: 3b9cde51e45ebbfe883c7986246c6fee987351b3f1455ed84189a70315b5b7bb

Description	Categories
1.5.7 Ensure that a unique Certificate Authority is used for etcd
1.6.3 Create network segmentation using Network Policies	SYSTEM AND COMMUNICATIONS PROTECTION
1.6.4 Ensure that the seccomp profile is set to docker/default in your pod definitions
1.6.5 Apply Security Context to Your Pods and Containers
1.6.6 Configure Image Provenance using ImagePolicyWebhook admission controller
1.6.7 Configure Network policies as appropriate
1.6.8 Place compensating controls in the form of PSP and RBAC for privileged containers usage - clusterrolebinding	CONFIGURATION MANAGEMENT
1.6.8 Place compensating controls in the form of PSP and RBAC for privileged containers usage - psp	CONFIGURATION MANAGEMENT
1.6.8 Place compensating controls in the form of PSP and RBAC for privileged containers usage - rolebinding	CONFIGURATION MANAGEMENT
1.7.6 Do not admit root containers	CONFIGURATION MANAGEMENT
1.7.7 Do not admit containers with dangerous capabilities	CONFIGURATION MANAGEMENT
CIS_Kubernetes_v1.3.0_Level_2.audit from CIS Kubernetes Benchmark v1.3.0