cis-k8s-v1110-4.2.8
Ensure that the eventRecordQPS argument is set to a level which ensures appropriate event capture (Manual)
Browse reusable Agent Skills, each with a clear purpose and practical guidance.
Ensure that the eventRecordQPS argument is set to a level which ensures appropriate event capture (Manual)
Ensure that the --tls-cert-file and --tls-private-key-file arguments are set as appropriate (Manual)
Ensure that the kube-proxy metrics service is bound to localhost (Manual)
Ensure that the cluster-admin role is only used where required (Manual)
Minimize access to the proxy sub-resource of nodes (Manual)
Minimize access to the approval sub-resource of certificatesigningrequests objects (Manual)
Minimize access to webhook configuration objects (Manual)
Minimize access to secrets (Manual)
Minimize wildcard use in Roles and ClusterRoles (Manual)
Minimize access to create pods (Manual)