CIS Kubernetes 1.13 Benchmark v1.4.0 L2

This audit file has been deprecated and will be removed in a future update.

Name: CIS Kubernetes 1.13 Benchmark v1.4.0 L2

Updated: 8/27/2019

Authority: CIS

Plugin: Unix

Revision: 1.1

Estimated Item Count: 12

Filename: CIS_Kubernetes_v1.4.0_Level_2.audit

Size: 32.7 kB

MD5: 15e2e593944828b3ad19b17644cc603f

SHA256: 514ed89cbf7a8078b30633e04110964fc27b99826399590f85c677445d5f1f4c

Description	Categories
1.5.7 Ensure that a unique Certificate Authority is used for etcd
1.6.3 Create network segmentation using Network Policies	SYSTEM AND COMMUNICATIONS PROTECTION
1.6.4 Ensure that the seccomp profile is set to docker/default in your pod definitions	CONFIGURATION MANAGEMENT
1.6.5 Apply Security Context to Your Pods and Containers
1.6.6 Configure Image Provenance using ImagePolicyWebhook admission controller
1.6.7 Configure Network policies as appropriate
1.6.8 Place compensating controls in the form of PSP and RBAC for privileged containers usage - clusterrolebinding	CONFIGURATION MANAGEMENT
1.6.8 Place compensating controls in the form of PSP and RBAC for privileged containers usage - psp	CONFIGURATION MANAGEMENT
1.6.8 Place compensating controls in the form of PSP and RBAC for privileged containers usage - rolebinding	CONFIGURATION MANAGEMENT
1.7.6 Do not admit root containers	CONFIGURATION MANAGEMENT
1.7.7 Do not admit containers with dangerous capabilities	CONFIGURATION MANAGEMENT
CIS_Kubernetes_v1.4.0_Level_2.audit from CIS Kubernetes Benchmark v1.4.0	CONFIGURATION MANAGEMENT