cis-ocp-v170-5.2.7
Minimize admission of containers with NET_RAW capability (Manual)
Browse reusable Agent Skills, each with a clear purpose and practical guidance.
Minimize admission of containers with NET_RAW capability (Manual)
Minimize admission of containers with added capabilities (Manual)
Minimize admission of containers with capabilities assigned (Manual)
Prefer using secrets as files over environment variables (Manual)
Configure Image Provenance using image controller config (Manual)
Create administrative boundaries using namespaces (Manual)
The default namespace should not be used (Manual)
Ensure that the API server pod specification file permissions are set to 600 or more restrictive (Manual)
Ensure that the Container Network Interface file ownership is set to root:root (Manual)
Ensure that the etcd data directory permissions are set to 700 or more restrictive (Manual)