cis-k8s-v1111-4.2.15
Ensure that the --IPAddressDeny is set to any (Manual)
Browse reusable Agent Skills, each with a clear purpose and practical guidance.
Ensure that the --IPAddressDeny is set to any (Manual)
Ensure that the --streaming-connection-idle-timeout argument is not set to 0 (Manual)
Ensure that the --make-iptables-util-chains argument is set to true (Automated)
Ensure that the --hostname-override argument is not set (Manual)
Ensure that the eventRecordQPS argument is set to a level which ensures appropriate event capture (Manual)
Ensure that the kube-proxy metrics service is bound to localhost (Manual)
Ensure that the cluster-admin role is only used where required (Manual)
Minimize access to the proxy sub-resource of nodes (Manual)
Minimize access to the approval sub-resource of certificatesigningrequests objects (Manual)
Minimize access to webhook configuration objects (Manual)