cis-ocp-v190-1.3.1
Ensure that controller manager healthz endpoints are protected by RBAC (Manual)
Browse reusable Agent Skills, each with a clear purpose and practical guidance.
Ensure that controller manager healthz endpoints are protected by RBAC (Manual)
Ensure that the --use-service-account-credentials argument is set to true (Manual)
Ensure that the --service-account-private-key-file argument is set as appropriate (Manual)
Ensure that the healthz endpoints for the scheduler are protected by RBAC (Manual)
Verify that the scheduler API service is protected by RBAC (Manual)
Ensure that the --client-cert-auth argument is set to true (Manual)
Ensure that the --peer-cert-file and --peer-key-file arguments are set as appropriate (Manual)
Ensure that a unique Certificate Authority is used for etcd (Manual)
Client certificate authentication should not be used for users (Manual)
Ensure that a minimal audit policy is created (Manual)