CIS Kubernetes Benchmark v1.5.1 L2

Warning! Audit Deprecated

This audit file has been deprecated and will be removed in a future update.

View Next Version

Audit Details

Name: CIS Kubernetes Benchmark v1.5.1 L2

Updated: 1/4/2021

Authority: CIS

Plugin: Unix

Revision: 1.4

Estimated Item Count: 14

Audit Items

Description	Categories
1.3.6 Ensure that the RotateKubeletServerCertificate argument is set to true	CONFIGURATION MANAGEMENT
2.7 Ensure that a unique Certificate Authority is used for etcd
3.1.1 Client certificate authentication should not be used for users	IDENTIFICATION AND AUTHENTICATION
3.2.2 Ensure that the audit policy covers key security concerns	AUDIT AND ACCOUNTABILITY
4.2.9 Ensure that the --event-qps argument is set to 0 or a level which ensures appropriate event capture	CONFIGURATION MANAGEMENT, SYSTEM AND COMMUNICATIONS PROTECTION
5.2.6 Minimize the admission of root containers	CONFIGURATION MANAGEMENT
5.2.9 Minimize the admission of containers with capabilities assigned	CONFIGURATION MANAGEMENT
5.3.2 Ensure that all Namespaces have Network Policies defined	SYSTEM AND COMMUNICATIONS PROTECTION
5.4.2 Consider external secret storage
5.5.1 Configure Image Provenance using ImagePolicyWebhook admission controller
5.7.2 Ensure that the seccomp profile is set to docker/default in your pod definitions	CONFIGURATION MANAGEMENT
5.7.3 Apply Security Context to Your Pods and Containers
5.7.4 The default namespace should not be used	ACCESS CONTROL
CIS_Kubernetes_v1.5.1_Level_2.audit from CIS Kubernetes Benchmark v1.5.1	CONFIGURATION MANAGEMENT