kube-bench/cfg/cis-1.12/config.yaml at main - kube-bench - Gitea: Git with a nice cup of tea

github/kube-bench

mirror of https://github.com/aquasecurity/kube-bench.git synced 2026-02-14 18:10:00 +00:00

Files

Andy Pitcher f1807bb192 feat: add CIS-1.12 support (#2035 )

- Update master to 1.2.29 and purge CBC ciphers: https://workbench.cisecurity.org/tickets/24968
- Remove TLS_RSA_WITH_AES_256_GCM_SHA384 & TLS_RSA_WITH_AES_128_GCM_SHA256 (CBC support) for node 4.2.12: https://workbench.cisecurity.org/tickets/24968
- Remove node check 4.2.15: https://workbench.cisecurity.org/tickets/24915
- Remove policy 5.2.9 "Minimize the admission of containers with added capabilities" (Manual): https://workbench.cisecurity.org/benchmarks/21709/tickets/25337
- Update "Minimize the admission of containers with capabilities assigned" policies to remove PodSecurityPolicy (PSP) references

Signed-off-by: Andy Pitcher <andy.pitcher@suse.com>

2026-02-12 11:34:08 +06:00

3 lines

77 B

YAML

Raw Permalink Blame History

	`---`
	`## Version-specific settings that override the values in cfg/config.yaml`