| grep "$ {test_dir}" | cut -d ":" -f 1 | xargs stat -c %a Audit Execution: ./1.1.11.sh etcd Expected result: '700' is equal to '700' 1.1.12 Ensure that the etcd data directory ownership is set to grep "$ {test_dir}" | cut -d ":" -f 1 | xargs stat -c %U:%G Audit Execution: ./1.1.12.sh etcd Expected result: 'etcd:etcd' is present 1.1.13 Ensure that the admin.conf file permissions are set to 644 For example, chown -R root:root /etc/kubernetes/ssl Audit: stat -c %U:%G /etc/kubernetes/ssl Expected result: 'root:root' is present 1.1.20 Ensure that the Kubernetes PKI certificate file permissions

| grep "$ {test_dir}" | cut -d ":" -f 1 | xargs stat -c %a Audit Execution: ./1.1.11.sh etcd Expected result: '700' is equal to '700' 1.1.12 Ensure that the etcd data directory ownership is set to grep "$ {test_dir}" | cut -d ":" -f 1 | xargs stat -c %U:%G Audit Execution: ./1.1.12.sh etcd Expected result: 'etcd:etcd' is present 1.1.13 Ensure that the admin.conf file permissions are set to 644 For example, chown -R root:root /etc/kubernetes/ssl Audit: stat -c %U:%G /etc/kubernetes/ssl Expected result: 'root:root' is present 1.1.20 Ensure that the Kubernetes PKI certificate file permissions

directory found above). For example, chmod 700 /var/lib/etcd Audit: stat -c %a /node/var/lib/etcd Expected Result: '700' is equal to '700' Returned Value: 700 1.1.12 Ensure that the etcd data directory stat -c %U:%G /node/var/lib/etcd CIS 1.6 Benchmark - Self-Assessment Guide - Rancher v2.5.4 10 Expected Result: 'etcd:etcd' is present Returned Value: etcd:etcd 1.1.19 Ensure that the Kubernetes PKI -R root:root / etc/kubernetes/pki/ Audit: check_files_owner_in_dir.sh /node/etc/kubernetes/ssl Expected Result: 'true' is equal to 'true' Audit Script: #!/usr/bin/env bash # This script is used to

Public Cloud Adoption “Eventually, container infrastructure software as a service may become an expected functionality” Revenue Growth 2022 to 2025 Cloud +$778.9M, 25% CAGR On-Prem/Other +$1052.7M Software Revenue ($M), 2022-2025 Aaron’s Anecdote In my prior life as a product manager for an MSP I expected to generate a dollar of services and consulting revenue for every ten dollars of software I sold

those looking to implement OpenShift onto their environment. However, there is a higher level of expected existing Kubernetes and container knowledge required. The documentation could be improved with onboard easier. Both Anthos and VMware Tanzu’s documentation lacked the technical insights often expected in documentation, making it difficult for any operator looking to extract insights and decipher

corresponding host/NodePort combination. When you begin, there won’t be any data in Kibana (which is expected as you have not pushed any data). The next step is to set up the log aggregator from container