CIS Kubernetes Benchmark v1.8.0 L2 Master

This audit file has been deprecated and will be removed in a future update.

Name: CIS Kubernetes Benchmark v1.8.0 L2 Master

Updated: 5/15/2024

Authority: CIS

Plugin: Unix

Revision: 1.1

Estimated Item Count: 17

Filename: CIS_Kubernetes_v1.8.0_Level_2_Master.audit

Size: 39.2 kB

MD5: e3653e4c3793c2106f5580fbd2ef06e1

SHA256: cfadf68075b909ba26d62bd2ca38ca411aadd79d3ac9a9711ac0fda3d5b01f67

Description	Categories
1.2.12 Ensure that the admission control plugin SecurityContextDeny is set if PodSecurityPolicy is not used
1.2.13 Ensure that the admission control plugin ServiceAccount is set
1.2.14 Ensure that the admission control plugin NamespaceLifecycle is set
1.2.15 Ensure that the admission control plugin NodeRestriction is set
1.2.16 Ensure that the --secure-port argument is not set to 0 - NoteThis recommendation is obsolete and will be deleted per the consensus process.
2.7 Ensure that a unique Certificate Authority is used for etcd
3.2.2 Ensure that the audit policy covers key security concerns
5.2.7 Minimize the admission of root containers
5.2.10 Minimize the admission of containers with capabilities assigned
5.3.2 Ensure that all Namespaces have Network Policies defined
5.4.1 Prefer using secrets as files over secrets as environment variables
5.4.2 Consider external secret storage
5.5.1 Configure Image Provenance using ImagePolicyWebhook admission controller
5.7.2 Ensure that the seccomp profile is set to docker/default in your pod definitions
5.7.3 Apply Security Context to Your Pods and Containers
5.7.4 The default namespace should not be used
CIS_Kubernetes_v1.8.0_Level_2_Master.audit from CIS Kubernetes Benchmark v1.8.0