cis-k8s-v200-4.2.3
Ensure that the --client-ca-file argument is set as appropriate (Automated)
Browse reusable Agent Skills, each with a clear purpose and practical guidance.
Ensure that the --client-ca-file argument is set as appropriate (Automated)
Verify that if defined, readOnlyPort is set to 0 (Manual)
Ensure that the --make-iptables-util-chains argument is set to true (Automated)
Ensure that the --hostname-override argument is not set (Manual)
Ensure that the --tls-cert-file and --tls-private-key-file arguments are set as appropriate (Manual)
Ensure that the kube-proxy metrics service is bound to localhost (Manual)
Minimize access to the proxy sub-resource of nodes (Manual)
Minimize access to the approval sub-resource of certificatesigningrequests objects (Manual)
Minimize access to the service account token creation (Manual)
Minimize access to secrets (Manual)