cis-k8s-v1120-5.1.1
Ensure that the cluster-admin role is only used where required (Manual)
1.21k repo starsObserved in 1 repos
DevOps & Security
Browse reusable Agent Skills, each with a clear purpose and practical guidance.
Ensure that the cluster-admin role is only used where required (Manual)
Minimize access to the proxy sub-resource of nodes (Manual)
Minimize access to the approval sub-resource of certificatesigningrequests objects (Manual)
Minimize access to webhook configuration objects (Manual)
Minimize access to the service account token creation (Manual)
Minimize access to secrets (Manual)
Minimize wildcard use in Roles and ClusterRoles (Manual)
Minimize access to create pods (Manual)
Ensure that default service accounts are not actively used (Manual)
Ensure that Service Account Tokens are only mounted where necessary (Manual)