cis-ocp-v160-5.1.4
Minimize access to create pods (Manual)
Browse reusable Agent Skills, each with a clear purpose and practical guidance.
Minimize access to create pods (Manual)
Ensure that default service accounts are not actively used. (Manual)
Ensure that Service Account Tokens are only mounted where necessary (Manual)
Minimize the admission of privileged containers (Manual)
Minimize the admission of containers wishing to share the host process ID namespace (Manual)
Minimize the admission of root containers (Manual)
Minimize the admission of containers with the NET_RAW capability (Manual)
Minimize the admission of containers with added capabilities (Manual)
Minimize the admission of containers with capabilities assigned (Manual)
Prefer using secrets as files over secrets as environment variables (Manual)