fixup! Update baseline cluster security (#475)

Signed-off-by: Hannes Baum <[email protected]>
SovereignCloudStack · Apr 25, 2024 · 74e91d0 · 74e91d0
1 parent 30658f6
commit 74e91d0
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/Standards/scs-0217-v1-cluster-hardening.md b/Standards/scs-0217-v1-cluster-hardening.md
@@ -394,6 +394,12 @@ Kubelet HTTP read-only port
 - what is it really for?
 - what happens if deactivated?
 - Kubelet authorization
+https://www.stigviewer.com/stig/kubernetes/2021-04-14/finding/V-242387
+https://docs.datadoghq.com/security/default_rules/cis-kubernetes-1.5.1-4.2.4/
+https://github.com/kubernetes/kubernetes/pull/59666 (disabled here)
+https://github.com/kubernetes/kubernetes/issues/12968 (should be removed, but not done yet due to e2e)
+https://github.com/kubernetes/kubeadm/issues/732 (here in kubeadm)
+
 
 Standard
 - ask Steve about authentication