Detections
Analytics

CIS Kubernetes v1.24 Benchmark v1.0.0 L2 Master

Audit Details

Name: CIS Kubernetes v1.24 Benchmark v1.0.0 L2 Master

Updated: 4/12/2023

Authority: CIS

Plugin: Unix

Revision: 1.4

Estimated Item Count: 13

File Details

Filename: CIS_Kubernetes_v1.24_v1.0.0_Level_2_Master.audit

Size: 46 kB

MD5: 6aea83f26681b0968a8573dc45ea82e7
SHA256: 50a258d6b4658090f17316180ff5ce8a35dc002cf362b2cc80b189c37068ae8b

Audit Changelog

 
Revision 1.4

Apr 12, 2023

Functional Update
  • 1.3.6 Ensure that the RotateKubeletServerCertificate argument is set to true
  • 2.7 Ensure that a unique Certificate Authority is used for etcd
  • 3.2.2 Ensure that the audit policy covers key security concerns
  • 5.2.10 Minimize the admission of containers with capabilities assigned
  • 5.2.7 Minimize the admission of root containers
  • 5.3.2 Ensure that all Namespaces have Network Policies defined
  • 5.4.1 Prefer using secrets as files over secrets as environment variables
  • 5.4.2 Consider external secret storage
  • 5.5.1 Configure Image Provenance using ImagePolicyWebhook admission controller
  • 5.7.2 Ensure that the seccomp profile is set to docker/default in your pod definitions
  • 5.7.3 Apply Security Context to Your Pods and Containers
  • 5.7.4 The default namespace should not be used
Informational Update
  • 3.2.2 Ensure that the audit policy covers key security concerns
Miscellaneous
  • Metadata updated.
  • Platform check updated.
Removed
  • CIS_Kubernetes_v1.24_v1.0.0_Level_2_Master.audit from CIS Kubernetes v1.24 Benchmark v1.0.0
Revision 1.3

Mar 7, 2023

Miscellaneous
  • Metadata updated.
  • References updated.
Revision 1.2

Jan 4, 2023

Miscellaneous
  • Metadata updated.
  • Variables updated.
Revision 1.1

Dec 7, 2022

Miscellaneous
  • Metadata updated.