...............................................................................................5 1.3 Summary........................................................................................... support also available Cost $ $$$$$ $$$ Note: The products are listed in alphabetical order. 1.3 Summary 1.3.1 KubeSphere 13 KubeSphere is more productized and easier to install than Rancher and

Controls 1 Master Node Security Configuration 1.1 Master Node Configuration Files 1.2 API Server 1.3 Controller Manager 1.4 Scheduler 2 Etcd Node Configuration 2 Etcd Node Configuration Files 3 Control Execution: ./1.2.34.sh /etc/kubernetes/ssl/encryption.yaml Expected result: '--pass' is present 1.3 Controller Manager 1.3.1 Ensure that the --terminated-pod-gc-threshold argument is set as appropriate

Controls 1 Master Node Security Configuration 1.1 Master Node Configuration Files 1.2 API Server 1.3 Controller Manager 1.4 Scheduler 2 Etcd Node Configuration 2 Etcd Node Configuration Files 3 Control Execution: ./1.2.34.sh /etc/kubernetes/ssl/encryption.yaml Expected result: '--pass' is present 1.3 Controller Manager 1.3.1 Ensure that the --terminated-pod-gc-threshold argument is set as appropriate

Concepts and Terminology ....................................................................... 4 1.3 Kubernetes Functionalities ...................................................................... which may not be searched but is required by the resource (for example, storing strong keys, etc). 1.3 Kubernetes Functionalities At bare minimum, any container orchestration platform needs the ability

(Automated) 1.2.35 Ensure that the API Server only makes use of Strong Cryptographic Ciphers (Automated) 1.3 Controller Manager 1.3.1 Ensure that the --terminated-pod-gc-threshold argument is set as appropriate grep kube-apiserver | grep -v grep CIS 1.6 Benchmark - Self-Assessment Guide - Rancher v2.5.4 76 1.3 Controller Manager 1.3.1 Ensure that the --terminated-pod-gc- threshold argument is set as appropriate

document under the terms of the GNU Free Documentation License, Version 1.2 or (at your option) version 1.3; with the Invariant Section being this copyright notice and license. A copy of the license version

| match("--address=127\\.0\\.0\\.1").string' Returned Value: --address=127.0.0.1 Result: Pass 1.3 - Controller Manager 1.3.1 - Ensure that the --terminated-pod-gc-threshold argument is set as appropriate