Vulnerabilities
Misconfiguration
Runtime Security
Compliance
Compliance > Kubernetes > CIS - GKE 1.0 > Control Plane Components >

Controller Manager

N/A
Source
Kube Bench
ID
1.3
Version
gke-1.0

1.3 Controller Manager

1.3.1 Ensure that the –terminated-pod-gc-threshold argument is set as appropriate (Not Scored)

This control cannot be modified in GKE.

1.3.2 Ensure that the –profiling argument is set to false (Not Scored)

This control cannot be modified in GKE.

1.3.3 Ensure that the –use-service-account-credentials argument is set to true (Not Scored)

This control cannot be modified in GKE.

1.3.4 Ensure that the –service-account-private-key-file argument is set as appropriate (Not Scored)

This control cannot be modified in GKE.

1.3.5 Ensure that the –root-ca-file argument is set as appropriate (Not Scored)

This control cannot be modified in GKE.

1.3.6 Ensure that the RotateKubeletServerCertificate argument is set to true (Not Scored)

This control cannot be modified in GKE.

1.3.7 Ensure that the –bind-address argument is set to 127.0.0.1 (Not Scored)

This control cannot be modified in GKE.

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.
Copyright © 2023 Aqua Security Software Ltd.   Privacy Policy | Terms of Use