cis-ocp-v170-1.2.7
Ensure that the --authorization-mode argument is not set to AlwaysAllow (Manual)
1.21k repo starsObserved in 1 repos
DevOps & Security
Browse reusable Agent Skills, each with a clear purpose and practical guidance.
Ensure that the --authorization-mode argument is not set to AlwaysAllow (Manual)
Ensure that the APIPriorityAndFairness feature gate is enabled (Manual)
Ensure controller manager healthz endpoints protected by RBAC (Manual)
Ensure --use-service-account-credentials set to true (Manual)
Ensure healthz endpoints for scheduler protected by RBAC (Manual)
Verify scheduler API service protected by RBAC (Manual)
Ensure --client-cert-auth set to true (Manual)
Ensure --peer-cert-file and --peer-key-file set (Manual)
Client certificate authentication should not be used for users (Manual)
Ensure minimal audit policy created (Manual)