cis-ocp-v190-5.1.6
Ensure that Service Account Tokens are only mounted where necessary (Manual)
Browse reusable Agent Skills, each with a clear purpose and practical guidance.
Ensure that Service Account Tokens are only mounted where necessary (Manual)
Minimize the admission of privileged containers (Manual)
Minimize the admission of containers wishing to share the host process ID namespace (Manual)
Minimize the admission of containers wishing to share the host network namespace (Manual)
Minimize the admission of containers with allowPrivilegeEscalation (Manual)
Minimize the admission of root containers (Manual)
Minimize the admission of containers with the NET_RAW capability (Manual)
Minimize the admission of containers with capabilities assigned (Manual)
Ensure that the CNI in use supports Network Policies (Manual)
Prefer using secrets as files over secrets as environment variables (Manual)