Rancher v2.5 CIS 1.5 Benchmark - Self-Assessment Guide - Rancher v2.5 1 4 5 6 6 14 29 33 34 34 37 37 38 38 42 49 49 50 Contents CIS v1.5 Kubernetes Benchmark - Rancher v2.5 with Kubernetes Guide - Rancher v2.5 2 52 53 5.3 Network Policies and CNI 5.6 General Policies CIS 1.5 Benchmark - Self-Assessment Guide - Rancher v2.5 3 CIS v1.5 Kubernetes Benchmark - Rancher v2.5 with Kubernetes to download a PDF version of this document Overview This document is a companion to the Rancher v2.5 security hardening guide. The hardening guide provides prescriptive guidance for hardening a production

SUSE Rancher • https://www.suse.com/de-de/products/suse-rancher/ • https://rancher.com/docs/rancher/v2.5/en/ • HashiCorp Vault • https://www.vaultproject.io/docs/platform/k8s • https://learn.hashicorp.c

Ensure that the --peer-cert-file and --peer-key-file arguments are set as appropriate (Automated) 2.5 Ensure that the --peer-client-cert-auth argument is set to true (Automated) 2.6 Ensure that the --peer-auto-tls benchmark rke-cis-1.6-hardened --json --log_dir /tmp/results/ logs --outputfile /tmp/results/etcd.json 2.5 Ensure that the --peer-client-cert-auth argument is set to true (Automated) Result: pass Remediation:

Self-Assessment Guide - v2.4 35 '--peer-cert-file' is present AND '--peer-key-file' is present 2.5 Ensure that the --peer-client-cert-auth argument is set to true (Scored) Result: PASS Remediation: