Skip to content

No profile (default benchmark)

Rules and Groups employed by this XCCDF Profile

  • Kubernetes etcd must enable client authentication to secure service.

    Kubernetes container and pod configuration are maintained by Kubelet. Kubelet agents register nodes with the API Server, mount volume storage, and perform health checks for containers and pods. Any...
    Rule Medium Severity
  • SRG-APP-000219-CTR-000550

    Group
  • Kubernetes etcd must have a key file for secure communication.

    Kubernetes stores configuration and state information in a distributed key-value store called etcd. Anyone who can write to etcd can effectively control the Kubernetes cluster. Even just reading th...
    Rule Medium Severity
  • SRG-APP-000219-CTR-000550

    Group
  • Kubernetes etcd must have a certificate for communication.

    Kubernetes stores configuration and state information in a distributed key-value store called etcd. Anyone who can write to etcd can effectively control a Kubernetes cluster. Even just reading the ...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules