SRG-APP-000033-CTR-000090 Controls

STIG IDVersionTitleProduct
CNTR-OS-000090V2R5OpenShift role-based access controls (RBAC) must be enforced.Red Hat OpenShift Container Platform
CNTR-R2-000100V2R6The Kubernetes Controller Manager must have secure binding.Rancher RKE2
CNTR-R2-000110V2R6The Kubernetes Kubelet must have anonymous authentication disabled.Rancher RKE2
CNTR-K8-000270V2R6The Kubernetes API Server must enable Node,RBAC as the authorization mode.Security Requirements Guide - Kubernetes
CNTR-K8-000300V2R6The Kubernetes Scheduler must have secure binding.Security Requirements Guide - Kubernetes
CNTR-K8-000310V2R6The Kubernetes Controller Manager must have secure binding.Security Requirements Guide - Kubernetes
CNTR-K8-000370V2R6The Kubernetes Kubelet must have anonymous authentication disabled.Security Requirements Guide - Kubernetes
CNTR-K8-000430V2R6Kubernetes Kubectl cp command must give expected access and results.Security Requirements Guide - Kubernetes
CNTR-K8-000440V2R6The Kubernetes kubelet staticPodPath must not enable static pods.Security Requirements Guide - Kubernetes
CNTR-K8-000470V2R6The Kubernetes API server must have Alpha APIs disabled.Security Requirements Guide - Kubernetes