cis-ocp-v160-4.2.12
Ensure that the Kubelet only makes use of Strong Cryptographic Ciphers (Manual)
Browse reusable Agent Skills, each with a clear purpose and practical guidance.
Ensure that the Kubelet only makes use of Strong Cryptographic Ciphers (Manual)
Ensure that the --anonymous-auth argument is set to false (Automated)
Ensure that the --client-ca-file argument is set as appropriate (Automated)
Verify that the read only port is not used or is set to 0 (Automated)
Ensure that the --streaming-connection-idle-timeout argument is not set to 0 (Automated)
Ensure that the --make-iptables-util-chains argument is set to true (Manual)
Ensure that the kubeAPIQPS [--event-qps] argument is set to 0 or a level which ensures appropriate event capture (Manual)
Ensure that the cluster-admin role is only used where required (Manual)
Minimize access to secrets (Manual)
Minimize wildcard use in Roles and ClusterRoles (Manual)