cis-gke-v180-4.1.3
Minimize wildcard use in Roles and ClusterRoles (Automated)
Browse reusable Agent Skills, each with a clear purpose and practical guidance.
Minimize wildcard use in Roles and ClusterRoles (Automated)
Ensure that default service accounts are not actively used (Automated)
Ensure that Service Account Tokens are only mounted where necessary (Automated)
Avoid use of system:masters group (Automated)
Limit use of the Bind, Impersonate and Escalate permissions in the Kubernetes cluster (Manual)
Avoid bindings to system:anonymous (Automated)
Avoid non-default bindings to system:unauthenticated (Automated)
Ensure that the cluster enforces Pod Security Standard Baseline profile or stricter for all namespaces (Manual)
Ensure that the CNI in use supports Network Policies (Manual)
Ensure that all Namespaces have Network Policies defined (Automated)