1.3.6 Ensure that the RotateKubeletServerCertificate argument is set to true

800-53|AC-17(2)

800-53|IA-5

800-53|IA-5(1)

800-53|SC-8

800-53|SC-8(1)

CSCv7|14.4

2.7 Ensure that a unique Certificate Authority is used for etcd

800-53|AC-1

800-53|AC-2

800-53|AC-2(1)

800-53|IA-4

3.2.2 Ensure that the audit policy covers key security concerns

800-53|AU-3

800-53|AU-3(1)

800-53|AU-7

800-53|AU-12

CSCv7|14.9

5.2.6 Minimize the admission of root containers

800-53|AC-6(2)

800-53|AC-6(5)

CSCv7|4

5.2.9 Minimize the admission of containers with capabilities assigned

800-53|CM-6

800-53|CM-7

CSCv7|5.2

5.3.2 Ensure that all Namespaces have Network Policies defined

800-53|CA-9

800-53|SC-7

800-53|SC-7(5)

CSCv7|14.2

5.4.1 Prefer using secrets as files over secrets as environment variables

800-53|SC-7(10)

CSCv7|13

5.5.1 Configure Image Provenance using ImagePolicyWebhook admission controller

5.7.2 Ensure that the seccomp profile is set to docker/default in your pod definitions

5.7.3 Apply Security Context to Your Pods and Containers

CSCv7|5.1

5.7.4 The default namespace should not be used

800-53|CP-6

800-53|CP-7

800-53|PL-8

800-53|PM-7

800-53|SA-8

CSCv7|2.10

CIS_Kubernetes_v1.20_v1.0.1_Level_2_Master.audit from CIS Kubernetes v1.20 Benchmark v1.0.1

CIS Kubernetes v1.20 Benchmark v1.0.1 L2 Master

Audit Details

File Details

Audit Changelog

Revision 1.2

Miscellaneous

Revision 1.1

Miscellaneous


Revision 1.2 Jan 4, 2023 Miscellaneous Metadata updated. Variables updated.
Revision 1.1 Dec 7, 2022 Miscellaneous Metadata updated.

CIS Kubernetes v1.20 Benchmark v1.0.1 L2 Master Download File

Audit Details

File Details

Audit Changelog

Revision 1.2

Miscellaneous

Revision 1.1

Miscellaneous

CIS Kubernetes v1.20 Benchmark v1.0.1 L2 Master