CIS Kubernetes Benchmark

Consider external secret storage
Profile Applicability: Level 1 Description:  Kubernetes allows secrets to be stored within the cluster using the Secret object. However, storing sec...
Fri, 9 May, 2025 at 5:52 AM
If proxy kubeconfig file exists, ensure ownership is set to root:root
Profile Applicability: Level 1 Description: The kubeconfig file, which contains sensitive credentials and cluster configuration details, should be ...
Fri, 9 May, 2025 at 5:56 AM
Prefer using secrets as files over secrets as environment variables
Profile Applicability: Level 1 Description:  Kubernetes supports the use of Secrets either as environment variables or as files mounted inside conta...
Fri, 9 May, 2025 at 5:58 AM
Ensure that all Namespaces have Network Policies defined
Profile Applicability: Level 1 Description:  Network Policies in Kubernetes are used to define how groups of pods can communicate with each other an...
Fri, 9 May, 2025 at 6:03 AM
If proxy kubeconfig file exists, ensure permissions are set to 600 or more restrictive
Profile Applicability: Level 1 Description: The kubeconfig file contains credentials, cluster configuration, and authentication information required...
Fri, 9 May, 2025 at 6:04 AM
Ensure that the CNI in use supports Network Policies
Profile Applicability: Level 1 Description:  The Container Network Interface (CNI) in Kubernetes defines how networking is configured for containers...
Fri, 9 May, 2025 at 6:09 AM
Ensure that the kubelet service file ownership is set to root:root
Profile Applicability: Level 1 Description: The ownership of the kubelet service file is critical for security and proper system management. The roo...
Fri, 9 May, 2025 at 6:14 AM
Minimize the admission of containers which use HostPorts
Profile Applicability: Level 1 Description:  In Kubernetes, containers can use HostPorts to bind to a port on the node's network interface, allo...
Fri, 9 May, 2025 at 6:16 AM
Ensure that the kubelet service file permissions are set to 600 or more restrictive
Profile Applicability: Level 1  Description: The kubelet service file is a critical configuration file that controls the kubelet service in a Kubern...
Fri, 9 May, 2025 at 6:23 AM
Ensure that the audit policy covers key security concerns
Profile Applicability: Level 2 Description: An audit policy is essential for ensuring that key security concerns are properly logged and tracked. A ...
Fri, 9 May, 2025 at 6:29 AM