cis-k8s-v1111-5.4.1
Prefer using secrets as files over secrets as environment variables (Manual)
Browse reusable Agent Skills, each with a clear purpose and practical guidance.
Prefer using secrets as files over secrets as environment variables (Manual)
Consider external secret storage (Manual)
Configure Image Provenance using ImagePolicyWebhook admission controller (Manual)
Create administrative boundaries between resources using namespaces (Manual)
Ensure that the seccomp profile is set to docker/default in your pod definitions (Manual)
Apply Security Context to Your Pods and Containers (Manual)
Ensure that the Container Network Interface file ownership is set to root:root (Manual)
Ensure that the etcd data directory permissions are set to 700 or more restrictive (Automated)
Ensure that the etcd data directory ownership is set to etcd:etcd (Automated)
Ensure that the default administrative credential file permissions are set to 600 (Automated)