cis-ocp-v170-4.1.9
Ensure that the kubelet --config configuration file has permissions set to 600 or more restrictive (Automated)
Browse reusable Agent Skills, each with a clear purpose and practical guidance.
Ensure that the kubelet --config configuration file has permissions set to 600 or more restrictive (Automated)
Activate Garbage collection in OpenShift Container Platform 4, as appropriate (Manual)
Ensure that the --rotate-certificates argument is not set to false (Manual)
Verify that the RotateKubeletServerCertificate argument is set to true (Manual)
Ensure that the Kubelet only makes use of Strong Cryptographic Ciphers (Manual)
Ensure that the --anonymous-auth argument is set to false (Automated)
Ensure that the --authorization-mode argument is not set to AlwaysAllow (Automated)
Ensure that the --client-ca-file argument is set as appropriate (Automated)
Verify that the read only port is not used or is set to 0 (Automated)
Ensure that the --streaming-connection-idle-timeout argument is not set to 0 (Automated)