Kubernetes node’s kubelet authorization-mode is set to AlwaysAllow
The kubelet reads various parameters, including security settings, from a config file. When AuthorizationMode is set to 'AlwaysAllow', the kubelet...
Blog
Ensure auditing is configured for Docker files and directories – docker.service (Automated)
As well as auditing the normal Linux file system and system calls, you should also audit all Docker related files...
Ensure auditing is configured for Docker files and directories – /etc/default/docker (Automated)
As well as auditing the normal Linux file system and system calls, you should audit all Docker related files and...
Ensure auditing is configured for Docker files and directories – /etc/docker (Automated)
As well as auditing the normal Linux file system and system calls, you should also audit all Docker related files...
Ensure auditing is configured for Docker files and directories – docker.socket (Automated)
As well as auditing the normal Linux file system and system calls, you should also audit the Docker daemon. Because...
Ensure auditing is configured for Docker files and directories – /var/lib/docker (Automated)
As well as auditing the normal Linux file system and system calls, you should also audit all Docker related files...
Kubernetes node’s kubelet read-only-port is enabled
The kubelet reads various parameters, including security settings, from a config file. The Kubelet process provides a read-only API in...
Kubernetes node’s kubelet streaming-connection-idle-timeout is set 0
The kubelet reads various parameters, including security settings, from a config file. Setting idle timeouts ensures that you are protected...
Kubernetes node’s kubelet protect-kernel-defaults is set false
The kubelet reads various parameters, including security settings, from a config file. Kernel parameters are usually tuned and hardened by...