Skip to content

Latest commit

 

History

History
 
 

cis-k8s-v1.5.1

Folders and files

NameName
Last commit message
Last commit date

parent directory

..
.krmignore
.krmignore
 
 
5.1.1_restrict-clusteradmin-rolebindings.yaml
5.1.1_restrict-clusteradmin-rolebindings.yaml
 
 
5.1.3_prohibit-role-wildcard-access.yaml
5.1.3_prohibit-role-wildcard-access.yaml
 
 
5.2.1_psp-privileged-container.yaml
5.2.1_psp-privileged-container.yaml
 
 
5.2.2-5.2.3_psp-host-namespace.yaml
5.2.2-5.2.3_psp-host-namespace.yaml
 
 
5.2.4_psp-host-network-ports.yaml
5.2.4_psp-host-network-ports.yaml
 
 
5.2.5_psp-allow-privilege-escalation-container.yaml
5.2.5_psp-allow-privilege-escalation-container.yaml
 
 
5.2.6_psp-restrict_root_containers.yaml
5.2.6_psp-restrict_root_containers.yaml
 
 
5.2.7-5.2.8-5.2.9_psp-capabilities.yaml
5.2.7-5.2.8-5.2.9_psp-capabilities.yaml
 
 
5.3.2_require-namespace-network-policies.yaml
5.3.2_require-namespace-network-policies.yaml
 
 
5.4.1_no-secrets-as-env-vars.yaml
5.4.1_no-secrets-as-env-vars.yaml
 
 
5.7.2_seccomp-default.yaml
5.7.2_seccomp-default.yaml
 
 
5.7.3_pods-require-security-context.yaml
5.7.3_pods-require-security-context.yaml
 
 
Kptfile
Kptfile
 
 
LICENSE
LICENSE
 
 
NOTICE
NOTICE
 
 
README.md
README.md
 
 
kustomization.yaml
kustomization.yaml
 
 

README.md

CIS Kubernetes Benchmark v.1.5.1

Description

Use the CIS Kubernetes Benchmark 1.5.1 policy bundle with Anthos Policy Controller to evaluate the compliance of your cluster resources against the CIS Kubernetes Benchmark, which is a set of recommendations for configuring Kubernetes to support a robust security posture.

The accompanying CIS Kubernetes Benchmark tutorial provides more details.

Disclaimer

These constraints are not certified by CIS.

Compatibility

This bundle requires Anthos Policy Controller v1.12.0 or higher.

Usage

(Optional) Preview the policy constraints with kubectl:

kubectl kustomize https://github.com/GoogleCloudPlatform/acm-policy-controller-library.git/bundles/cis-k8s-v1.5.1

Apply the policy constraints with kubectl:

kubectl apply -k https://github.com/GoogleCloudPlatform/acm-policy-controller-library.git/bundles/cis-k8s-v1.5.1

For more information visit: https://cloud.google.com/anthos-config-management/docs/how-to/using-cis-k8s-benchmark