Cis Docker 7.3
DevOps & Securitycis-docker-7.3Cis Docker 7.3 is an Agent Skill for devops & security published in the CyberStrikeus/CyberStrike repository on GitHub: a SKILL.md instruction file an AI agent can load to do this task.
Ensure that all Docker swarm overlay networks are encrypted
How to use this skill
Bring this guide into your coding agent with a prompt tailored to the tool you use.
- Open your project in Codex.
- Copy and paste the prompt below.
- Review files and risks before approving any action.
Inspect the Agent Skill at https://github.com/CyberStrikeus/CyberStrike/blob/HEAD/.cyberstrike/skill/CIS_benchmarks/Server_Software/Docker/CIS_Docker_Benchmark_v1.8.0/cis-docker-7.3/SKILL.md and all supporting files. Report provenance, permissions, scripts, dependencies, and security risks. Propose an exact installation into .agents/skills/cis-docker-7-3, but wait for my approval before writing files or running scripts.
Copying this prompt does not install or run the skill. Review third-party files before use.
7.3 Ensure that all Docker swarm overlay networks are encrypted (Manual)
Profile Applicability
- Level 1 - Docker Swarm
Description
Ensure that all Docker swarm overlay networks are encrypted.
Rationale
By default, data exchanged between containers on nodes on the overlay network is not encrypted. This could potentially expose traffic between containers.
Impact
None
Audit Procedure
You should run the command below to ensure that each overlay network has been encrypted.
docker network ls --filter driver=overlay --quiet | xargs docker network inspect --format '{{.Name}} {{ .Options }}'
Remediation
You should create overlay networks the with --opt encrypted flag.
Default Value
By default, data exchanged in overlay networks in Docker swarm mode is not encrypted.
References
CIS Controls
| Controls Version | Control | IG 1 | IG 2 | IG 3 |
|---|---|---|---|---|
| v8 | 3.10 Encrypt Sensitive Data in TransitEncrypt sensitive data in transit. Example implementations can include: Transport Layer Security (TLS) and Open Secure Shell (OpenSSH). | ● | ● | |
| v7 | 14.4 Encrypt All Sensitive Information in TransitEncrypt all sensitive information in transit. | ● | ● |