cis-gke-v190-4.1.2
Minimize access to secrets (Manual)
1.21k repo starsObserved in 1 repos
DevOps & Security
Browse reusable Agent Skills, each with a clear purpose and practical guidance.
Minimize access to secrets (Manual)
Minimize wildcard use in Roles and ClusterRoles (Manual)
Ensure that default service accounts are not actively used (Automated)
Ensure that Service Account Tokens are only mounted where necessary (Manual)
Avoid use of system:masters group (Automated)
Limit use of the Bind, Impersonate and Escalate permissions in the Kubernetes cluster (Manual)
Avoid bindings to system:anonymous (Automated)
Avoid non-default bindings to system:unauthenticated (Automated)
Ensure that the cluster enforces Pod Security Standard Baseline profile or stricter for all namespaces (Manual)
Ensure that the CNI in use supports Network Policies (Manual)