cis-k8s-v1111-5.1.13
Minimize access to the service account token creation (Manual)
1.21k repo starsObserved in 1 repos
DevOps & Security
Browse reusable Agent Skills, each with a clear purpose and practical guidance.
Minimize access to the service account token creation (Manual)
Minimize access to secrets (Manual)
Minimize wildcard use in Roles and ClusterRoles (Manual)
Minimize access to create pods (Manual)
Ensure that default service accounts are not actively used (Manual)
Ensure that Service Account Tokens are only mounted where necessary (Manual)
Avoid use of system:masters group (Manual)
Limit use of the Bind, Impersonate and Escalate permissions in the Kubernetes cluster (Manual)
Minimize access to create persistent volumes (Manual)
Ensure that the cluster has at least one active policy control mechanism in place (Manual)