cis-aks-v180-3.2.3
Ensure that the --client-ca-file argument is set as appropriate (Automated)
Browse reusable Agent Skills, each with a clear purpose and practical guidance.
Ensure that the --client-ca-file argument is set as appropriate (Automated)
Ensure that the --eventRecordQPS argument is set to 0 or a level which ensures appropriate event capture (Automated)
Ensure that the --rotate-certificates argument is not set to false (Automated)
Ensure that the RotateKubeletServerCertificate argument is set to true (Automated)
Ensure that the cluster-admin role is only used where required (Manual)
Minimize access to the approval sub-resource of certificatesigningrequests objects (Manual)
Minimize access to webhook configuration objects (Manual)
Minimize access to the service account token creation (Manual)
Minimize access to secrets (Manual)
Minimize access to create pods (Manual)