cis-aks-v170-3.2.2
Ensure that the --authorization-mode argument is not set to AlwaysAllow (Automated)
Browse reusable Agent Skills, each with a clear purpose and practical guidance.
Ensure that the --authorization-mode argument is not set to AlwaysAllow (Automated)
Ensure that the --client-ca-file argument is set as appropriate (Automated)
Ensure that the --eventRecordQPS argument is set to 0 or a level which ensures appropriate event capture (Automated)
Ensure that the --rotate-certificates argument is not set to false (Automated)
Ensure that the RotateKubeletServerCertificate argument is set to true (Automated)
Ensure that the cluster-admin role is only used where required (Automated)
Minimize access to secrets (Automated)
Minimize wildcard use in Roles and ClusterRoles (Automated)
Minimize access to create pods (Automated)
Ensure that default service accounts are not actively used (Automated)