cis-gke-v170-4.1.6
Avoid use of system:masters group (Automated)
1.21k repo starsObserved in 1 repos
DevOps & Security
DevOps & Security skills
Browse reusable Agent Skills, each with a clear purpose and practical guidance.
cis-gke-v170-4.1.7
Limit use of the Bind, Impersonate and Escalate permissions in the Kubernetes cluster (Manual)
1.21k repo starsObserved in 1 repos
DevOps & Security
cis-gke-v170-4.1.8
Avoid bindings to system:anonymous (Automated)
1.21k repo starsObserved in 1 repos
DevOps & Security
cis-gke-v170-4.1.9
Avoid non-default bindings to system:unauthenticated (Automated)
1.21k repo starsObserved in 1 repos
DevOps & Security
cis-gke-v170-4.2.1
Ensure that the cluster enforces Pod Security Standard Baseline profile or stricter for all namespaces (Manual)
1.21k repo starsObserved in 1 repos
DevOps & Security
cis-gke-v170-4.3.1
Ensure that the CNI in use supports Network Policies (Manual)
1.21k repo starsObserved in 1 repos
DevOps & Security
cis-gke-v170-4.3.2
Ensure that all Namespaces have Network Policies defined (Automated)
1.21k repo starsObserved in 1 repos
DevOps & Security
cis-gke-v170-4.4.1
Prefer using secrets as files over secrets as environment variables (Automated)
1.21k repo starsObserved in 1 repos
DevOps & Security
cis-gke-v170-4.5.1
Configure Image Provenance using ImagePolicyWebhook admission controller (Manual)
1.21k repo starsObserved in 1 repos
DevOps & Security
cis-gke-v170-4.6.1
Create administrative boundaries between resources using namespaces (Manual)
1.21k repo starsObserved in 1 repos
DevOps & Security