An XCCDF Rule
/etc/kubernetes/static-pod-resources/kube-*/secrets/*/tls.crt
$ sudo chmod 0600 /etc/kubernetes/static-pod-resources/kube-*/secrets/*/tls.crt