cis-k8s-v1110-5.1.5
Ensure that default service accounts are not actively used (Manual)
Browse reusable Agent Skills, each with a clear purpose and practical guidance.
Ensure that default service accounts are not actively used (Manual)
Ensure that Service Account Tokens are only mounted where necessary (Manual)
Avoid use of system:masters group (Manual)
Limit use of the Bind, Impersonate and Escalate permissions in the Kubernetes cluster (Manual)
Minimize access to create persistent volumes (Manual)
Ensure that the cluster has at least one active policy control mechanism in place (Manual)
Minimize the admission of containers with capabilities assigned (Manual)
Minimize the admission of Windows HostProcess Containers (Manual)
Minimize the admission of containers which use HostPorts (Manual)
Minimize the admission of privileged containers (Manual)