occupation
Information Security Analysts
description
Ensure that the kubeconfig file permissions are set to 644 or more restrictive (Automated)
updated
Skills in this repository
CyberStrikeus/CyberStrike - Page 53
SkillsMP has collected 7,442 skills from CyberStrikeus/CyberStrike. Open a skill to review its source and details.
CyberStrikeus/CyberStrikeShowing 40 of 7,442 collected skills.
skill
occupation
description
updated
occupation
Information Security Analysts
description
Ensure that the kubelet kubeconfig file ownership is set to root:root (Automated)
updated
occupation
Information Security Analysts
description
Ensure that the kubelet configuration file has permissions set to 644 (Automated)
updated
occupation
Information Security Analysts
description
Ensure that the kubelet configuration file ownership is set to root:root (Automated)
updated
occupation
Information Security Analysts
description
Ensure that the cluster-admin role is only used where required (Automated)
updated
occupation
Information Security Analysts
description
Avoid non-default bindings to system:authenticated (Automated)
updated
occupation
Information Security Analysts
description
Minimize access to secrets (Automated)
updated
occupation
Information Security Analysts
description
Minimize wildcard use in Roles and ClusterRoles (Automated)
updated
occupation
Information Security Analysts
description
Ensure that default service accounts are not actively used (Automated)
updated
occupation
Information Security Analysts
description
Ensure that Service Account Tokens are only mounted where necessary (Automated)
updated
occupation
Information Security Analysts
description
Avoid use of system:masters group (Automated)
updated
occupation
Information Security Analysts
description
Limit use of the Bind, Impersonate and Escalate permissions in the Kubernetes cluster (Manual)
updated
occupation
Information Security Analysts
description
Avoid bindings to system:anonymous (Automated)
updated
occupation
Information Security Analysts
description
Avoid non-default bindings to system:unauthenticated (Automated)
updated
occupation
Information Security Analysts
description
Ensure that the cluster enforces Pod Security Standard Baseline profile or stricter for all namespaces (Manual)
updated
occupation
Information Security Analysts
description
Ensure that the CNI in use supports Network Policies (Manual)
updated
occupation
Information Security Analysts
description
Ensure that all Namespaces have Network Policies defined (Automated)
updated
occupation
Information Security Analysts
description
Prefer using secrets as files over secrets as environment variables (Automated)
updated
occupation
Information Security Analysts
description
Consider external secret storage (Manual)
updated
occupation
Information Security Analysts
description
Configure Image Provenance using ImagePolicyWebhook admission controller (Manual)
updated
occupation
Information Security Analysts
description
Create administrative boundaries between resources using namespaces (Manual)
updated
occupation
Information Security Analysts
description
Ensure that the seccomp profile is set to RuntimeDefault in the pod definitions (Automated)
updated
occupation
Information Security Analysts
description
Apply Security Context to Pods and Containers (Manual)
updated
occupation
Information Security Analysts
description
The default namespace should not be used (Automated)
updated
occupation
Information Security Analysts
description
Ensure Image Vulnerability Scanning is enabled (Automated)
updated
occupation
Information Security Analysts
description
Minimize user access to Container Image repositories (Manual)
updated
occupation
Information Security Analysts
description
Minimize cluster access to read-only for Container Image repositories (Manual)
updated
occupation
Information Security Analysts
description
Ensure only trusted container images are used (Manual)
updated
occupation
Information Security Analysts
description
Ensure Kubernetes Web UI is Disabled (Automated)
updated
occupation
Information Security Analysts
description
Ensure that Alpha clusters are not used for production workloads (Automated)
updated
occupation
Information Security Analysts
description
Consider GKE Sandbox for running untrusted workloads (Automated)
updated
occupation
Information Security Analysts
description
Enable Security Posture (Manual)
updated
occupation
Information Security Analysts
description
Ensure GKE clusters are not running using the Compute Engine default service account (Automated)
updated
occupation
Information Security Analysts
description
Prefer using dedicated GCP Service Accounts and Workload Identity (Manual)
updated
occupation
Information Security Analysts
description
Ensure Kubernetes Secrets are encrypted using keys managed in Cloud KMS (Automated)
updated
occupation
Information Security Analysts
description
Ensure the GKE Metadata Server is Enabled (Automated)
updated
occupation
Information Security Analysts
description
Ensure Container-Optimized OS (cos_containerd) is used for GKE Node images (Automated)
updated
occupation
Information Security Analysts
description
Ensure Node Auto-Repair is Enabled for GKE Nodes (Automated)
updated
occupation
Information Security Analysts
description
Ensure Node Auto-Upgrade is Enabled for GKE Nodes (Automated)
updated
occupation
Information Security Analysts
description
When creating New Clusters - Automate GKE version management using Release Channels (Automated)
updated
Showing 40 of 7,442 collected skills.