cis-ocp-v170-1.1.16
Ensure that the Scheduler kubeconfig file ownership is set to root:root (Manual)
Browse reusable Agent Skills, each with a clear purpose and practical guidance.
Ensure that the Scheduler kubeconfig file ownership is set to root:root (Manual)
Ensure that the Controller Manager kubeconfig file permissions are set to 600 or more restrictive (Manual)
Ensure that the Controller Manager kubeconfig file ownership is set to root:root (Manual)
Ensure that the OpenShift PKI directory and file ownership is set to root:root (Manual)
Ensure that the OpenShift PKI key file permissions are set to 600 or more restrictive (Manual)
Ensure that the controller manager pod specification file ownership is set to root:root (Manual)
Ensure that the scheduler pod specification file permissions are set to 600 or more restrictive (Manual)
Ensure that the scheduler pod specification file ownership is set to root:root (Manual)
Ensure that the Container Network Interface file permissions are set to 600 or more restrictive (Manual)
Ensure that the admission control plugin AlwaysAdmit is not set (Manual)