DevOps & Security skills

Browse reusable Agent Skills, each with a clear purpose and practical guidance.

cis-k8s-v1120-4.2.12

Ensure that the Kubelet only makes use of Strong Cryptographic Ciphers (Manual)

1.21k repo starsObserved in 1 repos
DevOps & Security

cis-k8s-v1120-4.2.2

Ensure that the --authorization-mode argument is not set to AlwaysAllow (Automated)

1.21k repo starsObserved in 1 repos
DevOps & Security

cis-k8s-v1120-4.2.3

Ensure that the --client-ca-file argument is set as appropriate (Automated)

1.21k repo starsObserved in 1 repos
DevOps & Security

cis-k8s-v1120-4.2.4

Verify that if defined, readOnlyPort is set to 0 (Manual)

1.21k repo starsObserved in 1 repos
DevOps & Security

cis-k8s-v1120-4.2.5

Ensure that the --streaming-connection-idle-timeout argument is not set to 0 (Manual)

1.21k repo starsObserved in 1 repos
DevOps & Security

cis-k8s-v1120-4.2.6

Ensure that the --make-iptables-util-chains argument is set to true (Automated)

1.21k repo starsObserved in 1 repos
DevOps & Security

cis-k8s-v1120-4.2.7

Ensure that the --hostname-override argument is not set (Manual)

1.21k repo starsObserved in 1 repos
DevOps & Security

cis-k8s-v1120-4.2.8

Ensure that the eventRecordQPS argument is set to a level which ensures appropriate event capture (Manual)

1.21k repo starsObserved in 1 repos
DevOps & Security

cis-k8s-v1120-4.2.9

Ensure that the --tls-cert-file and --tls-private-key-file arguments are set as appropriate (Manual)

1.21k repo starsObserved in 1 repos
DevOps & Security

cis-k8s-v1120-4.3.1

Ensure that the kube-proxy metrics service is bound to localhost (Manual)

1.21k repo starsObserved in 1 repos
DevOps & Security