Skip to content
ATO Pathways
Log In
Overview
Search
Catalogs
SCAP
OSCAL
Catalogs
Profiles
Documents
References
Knowledge Base
Platform Documentation
Compliance Dictionary
Platform Changelog
About
Catalogs
XCCDF
Guide to the Secure Configuration of Amazon Elastic Kubernetes Service
Kubernetes Settings
OpenShift Kube API Server
OpenShift Kube API Server
An XCCDF Group - A logical subset of the XCCDF Benchmark
Details
Profiles
Prose
OpenShift Kube API Server
This section contains recommendations for kube-apiserver configuration.
API Server Request Timeout
Enter API Server Request Timeout
API Server audit log max size
API Server audit log max size
Bind Address of secure API endpoint
Bind Address of secure API endpoint
OpenShift Kube APIServer client CA
OpenShift Kube APIServer client CA
OpenShift APIServer etcd encryption filter
OpenShift APIServer etcd encryption config check jq filter
OpenShift APIServer etcd encryption path
OpenShift APIServer etcd encryption config check api path
OpenShift APIServer etcd encryption type
OpenShift APIServer etcd encryption provider type to use for remediation. This variable is only applicable to remediations, and does not affect checks. This variable is set to 'aescbc' by default, which is supported across all OpenShift versions as the etcd encryption provider type. OpenShift 4.13 and newer support 'aesgcm'. Attempting to use 'aesgcm' on older versions of OpenShift will result in a failed remediation. Please make sure the encryption provider type you set is supported on the version of OpenShift you're using.
OpenShift Kube APIServer etcd CA
OpenShift Kube APIServer etcd CA
OpenShift Kube APIServer kubelet certificate authority
OpenShift Kube APIServer kubelet certificate authority
OpenShift Kube APIServer kubelet client cert
OpenShift Kube APIServer kubelet client cert
OpenShift Kube APIServer kubelet client key
OpenShift Kube APIServer kubelet client key
OpenShift Kube APIServer TLS cert
OpenShift Kube APIServer TLS cert
OpenShift Kube APIServer TLS private key
OpenShift Kube APIServer TLS private key
OpenShift API Server config name
OpenShift API Server config name
OpenShift APIServer etcd encryption filter
OpenShift APIServer etcd encryption config check jq filter
OpenShift APIServer namespace
OpenShift APIServer namespace
OpenShift Kube API Server config name
OpenShift Kube API Server config name
OpenShift Kube API Server config data name
OpenShift Kube API Server config data name
OpenShift Kube APIServer namespace
OpenShift Kube APIServer namespace