An XCCDF Rule
/etc/kubernetes/static-pod-resources/*/*/*/tls.crt
$ sudo chgrp root /etc/kubernetes/static-pod-resources/*/*/*/tls.crt