CIS Kubernetes Benchmark

Ensure that the --tls-cert-file and --tls-private-key-file arguments are set as appropriate
Profile Applicability: Level 1 Description:  The --tls-cert-file and --tls-private-key-file arguments in Kubernetes control the paths to the certific...
Mon, 12 May, 2025 at 3:28 AM
Ensure that the --rotate-certificates argument is not set to false
 Profile Applicability: Level 1 Description:  The --rotate-certificates argument in Kubernetes ensures that certificates are automatically rotated, e...
Mon, 12 May, 2025 at 3:35 AM
Verify that the RotateKubeletServerCertificate argument is set to true
Profile Applicability: Level 1 Description:  The RotateKubeletServerCertificate argument in Kubernetes determines whether the Kubelet automatically r...
Mon, 12 May, 2025 at 3:41 AM
Ensure that the Kubelet only makes use of Strong Cryptographic Ciphers
Profile Applicability: Level 1 Description:  The Kubelet is a critical component of the Kubernetes control plane responsible for managing containers ...
Mon, 12 May, 2025 at 3:47 AM
Ensure that a limit is set on pod PIDs
Profile Applicability: Level 1 Description:  In Kubernetes, PIDs (Process IDs) are used to identify processes running within a pod. By default, there...
Mon, 12 May, 2025 at 3:55 AM
Ensure that the kube-proxy metrics service is bound to localhost
Profile Applicability: Level 1 Description:  The kube-proxy service is responsible for maintaining network rules for pod communication. This check en...
Mon, 12 May, 2025 at 4:01 AM
Ensure that the cluster-admin role is only used where required
Profile Applicability: Level 1 Description:  The cluster-admin role in Kubernetes grants full administrative access to the entire cluster, including ...
Mon, 12 May, 2025 at 4:08 AM
Minimize access to secrets
Profile Applicability: Level 1 Description:  In Kubernetes, secrets are used to store sensitive data such as passwords, tokens, and keys. This check ...
Mon, 12 May, 2025 at 4:16 AM
Minimize wildcard use in Roles and ClusterRoles
Profile Applicability: Level 1 Description:  Kubernetes Roles and ClusterRoles can specify resources and verbs that define access permissions. Wildca...
Mon, 12 May, 2025 at 4:24 AM
Minimize access to the approval sub-resource of certificatesigningrequests objects
Profile Applicability: Level 1 Description:  The CertificateSigningRequest (CSR) object in Kubernetes allows users to request certificates for worklo...
Mon, 12 May, 2025 at 4:30 AM