CIS 1.5 Benchmark - Self- Assessment Guide - Rancher v2.5 CIS 1.5 Benchmark - Self-Assessment Guide - Rancher v2.5 1 4 5 6 6 14 29 33 34 34 37 37 38 38 42 49 49 50 Contents CIS v1 Policies CIS 1.5 Benchmark - Self-Assessment Guide - Rancher v2.5 2 52 53 5.3 Network Policies and CNI 5.6 General Policies CIS 1.5 Benchmark - Self-Assessment Guide - Rancher v2.5 3 CIS v1.5 Kubernetes Rancher Version CIS Benchmark Version Kubernetes Version Hardening Guide with CIS 1.5 Benchmark Rancher v2.5 CIS v1.5 Kubernetes v1.15 Because Rancher and RKE install Kubernetes services as Docker containers

6 6 14 29 33 34 34 37 37 38 38 42 49 49 50 52 Contents CIS Kubernetes Benchmark v1.5 - Rancher v2.4 with Kubernetes v1.15 Controls 1 Master Node Security Configuration 1.1 Master Node General Policies CIS Benchmark Rancher Self-Assessment Guide - v2.4 3 CIS Kubernetes Benchmark v1.5 - Rancher v2.4 with Kubernetes v1.15 Click here to download a PDF version of this document Overview Version Self Assessment Guide v2.4 Rancher v2.4 Hardening Guide v2.4 Kubernetes v1.15 Benchmark v1.5 Because Rancher and RKE install Kubernetes services as Docker containers, many of the control verification

Rancher Version CIS Benchmark Version Kubernetes Version Hardening Guide v2.4 Rancher v2.4 Benchmark v1.5 Kubernetes 1.15 Click here to download a PDF version of this document Overview This document provides Rancher v2.4. Known Issues Rancher exec shell and view logs for pods are not functional in a CIS 1.5 hardened setup when only public IP is provided when registering custom nodes. This functionality requires restricted Rancher creates RoleBindings and ClusterRoleBindings on the default service accounts. The CIS 1.5 5.1.5 check requires the default service accounts have no roles or cluster roles bound to it apart

............................................................................................. 7 1.5 Summary ......................................................................................... components such as: user interface, container resource monitoring and logging-related components. 1.5 Summary Kubernetes provides cluster management for containerized workloads and simplifies container

Version CIS Benchmark Version Kubernetes Version Hardening Guide v2.3.5 Rancher v2.3.5 Benchmark v1.5 Kubernetes 1.15 Click here to download a PDF version of this document Overview This document provides

heduler-key.pem - 600 /etc/kubernetes/ssl/kube-service-account-token-key.pem - 600 Result: Pass 1.5 - etcd 1.5.1 - Ensure that the --cert-file and --key-file arguments are set as appropriate (Scored)