cis-k8s-v1120-4.2.12
Ensure that the Kubelet only makes use of Strong Cryptographic Ciphers (Manual)
Browse reusable Agent Skills, each with a clear purpose and practical guidance.
Ensure that the Kubelet only makes use of Strong Cryptographic Ciphers (Manual)
Ensure that the --authorization-mode argument is not set to AlwaysAllow (Automated)
Ensure that the --client-ca-file argument is set as appropriate (Automated)
Verify that if defined, readOnlyPort is set to 0 (Manual)
Ensure that the --streaming-connection-idle-timeout argument is not set to 0 (Manual)
Ensure that the --make-iptables-util-chains argument is set to true (Automated)
Ensure that the --hostname-override argument is not set (Manual)
Ensure that the eventRecordQPS argument is set to a level which ensures appropriate event capture (Manual)
Ensure that the --tls-cert-file and --tls-private-key-file arguments are set as appropriate (Manual)
Ensure that the kube-proxy metrics service is bound to localhost (Manual)