🚀Launch Week 07, January 27th - 31st, 2025🚀

Plugins Docs Home

turbot/steampipe-mod-kubernetes-compliance

cluster_role_binding_default_service_account_binding_not_active cluster_role_with_validating_or_mutating_admission_webhook_configurations config_map_default_namespace_used cronjob_container_admission_capability_restricted cronjob_container_admission_control_plugin_always_pull_images cronjob_container_admission_control_plugin_no_always_admit cronjob_container_arg_peer_client_cert_auth_enabled cronjob_container_argument_anonymous_auth_disabled cronjob_container_argument_audit_log_maxage_greater_than_30 cronjob_container_argument_audit_log_maxbackup_greater_than_10 cronjob_container_argument_audit_log_maxsize_greater_than_100 cronjob_container_argument_audit_log_path_configured cronjob_container_argument_authorization_mode_no_always_allow cronjob_container_argument_authorization_mode_node cronjob_container_argument_authorization_mode_rbac cronjob_container_argument_etcd_auto_tls_disabled cronjob_container_argument_etcd_cafile_configured cronjob_container_argument_etcd_certfile_and_keyfile_configured cronjob_container_argument_etcd_client_cert_auth_enabled cronjob_container_argument_etcd_peer_certfile_and_peer_keyfile_configured cronjob_container_argument_event_qps_less_than_5 cronjob_container_argument_insecure_port_0 cronjob_container_argument_kube_apiserver_etcd_certfile_and_keyfile_configured cronjob_container_argument_kube_apiserver_profiling_disabled cronjob_container_argument_kube_apiserver_tls_cert_file_and_tls_private_key_file_configured cronjob_container_argument_kube_controller_manager_bind_address_127_0_0_1 cronjob_container_argument_kube_controller_manager_profiling_disabled cronjob_container_argument_kube_controller_manager_root_ca_file_configured cronjob_container_argument_kube_controller_manager_service_account_credentials_enabled cronjob_container_argument_kube_controller_manager_service_account_private_key_file_configured cronjob_container_argument_kube_scheduler_bind_address_127_0_0_1 cronjob_container_argument_kube_scheduler_profiling_disabled cronjob_container_argument_kubelet_authorization_mode_no_always_allow cronjob_container_argument_kubelet_client_ca_file_configured cronjob_container_argument_kubelet_client_certificate_and_key_configured cronjob_container_argument_kubelet_https_enabled cronjob_container_argument_kubelet_read_only_port_0 cronjob_container_argument_kubelet_terminated_pod_gc_threshold_configured cronjob_container_argument_kubelet_tls_cert_file_and_tls_private_key_file_configured cronjob_container_argument_make_iptables_util_chains_enabled cronjob_container_argument_namespace_lifecycle_enabled cronjob_container_argument_node_restriction_enabled cronjob_container_argument_pod_security_policy_enabled cronjob_container_argument_protect_kernel_defaults_enabled cronjob_container_argument_request_timeout_appropriate cronjob_container_argument_rotate_kubelet_server_certificate_enabled cronjob_container_argument_secure_port_not_0 cronjob_container_argument_security_context_deny_enabled cronjob_container_argument_service_account_enabled cronjob_container_argument_service_account_key_file_appropriate cronjob_container_argument_service_account_lookup_enabled cronjob_container_capabilities_drop_all cronjob_container_encryption_providers_configured cronjob_container_host_port_not_specified cronjob_container_image_pull_policy_always cronjob_container_image_tag_specified cronjob_container_kubelet_certificate_authority_configured cronjob_container_kubernetes_dashboard_not_deployed cronjob_container_liveness_probe cronjob_container_no_argument_basic_auth_file cronjob_container_no_argument_hostname_override_configured cronjob_container_no_argument_insecure_bind_address cronjob_container_privilege_disabled cronjob_container_privilege_escalation_disabled cronjob_container_privilege_port_mapped cronjob_container_readiness_probe cronjob_container_rotate_certificate_enabled cronjob_container_secrets_defined_as_files cronjob_container_security_context_exists cronjob_container_streaming_connection_idle_timeout_not_zero cronjob_container_strong_kube_apiserver_cryptographic_ciphers cronjob_container_strong_kubelet_cryptographic_ciphers cronjob_container_sys_admin_capability_disabled cronjob_container_token_auth_file_not_configured cronjob_container_with_added_capabilities cronjob_cpu_limit cronjob_cpu_request cronjob_default_namespace_used cronjob_default_seccomp_profile_enabled cronjob_host_network_access_disabled cronjob_hostpid_hostipc_sharing_disabled cronjob_immutable_container_filesystem cronjob_memory_limit cronjob_memory_request cronjob_non_root_container daemonset_container_admission_capability_restricted daemonset_container_admission_control_plugin_always_pull_images daemonset_container_admission_control_plugin_no_always_admit daemonset_container_arg_peer_client_cert_auth_enabled daemonset_container_argument_anonymous_auth_disabled daemonset_container_argument_audit_log_maxage_greater_than_30 daemonset_container_argument_audit_log_maxbackup_greater_than_10 daemonset_container_argument_audit_log_maxsize_greater_than_100 daemonset_container_argument_audit_log_path_configured daemonset_container_argument_authorization_mode_no_always_allow daemonset_container_argument_authorization_mode_node daemonset_container_argument_authorization_mode_rbac daemonset_container_argument_etcd_auto_tls_disabled daemonset_container_argument_etcd_cafile_configured daemonset_container_argument_etcd_certfile_and_keyfile_configured daemonset_container_argument_etcd_client_cert_auth_enabled daemonset_container_argument_etcd_peer_certfile_and_peer_keyfile_configured daemonset_container_argument_event_qps_less_than_5 daemonset_container_argument_insecure_port_0 daemonset_container_argument_kube_apiserver_etcd_certfile_and_keyfile_configured daemonset_container_argument_kube_apiserver_profiling_disabled daemonset_container_argument_kube_apiserver_tls_cert_file_and_tls_private_key_file_configured daemonset_container_argument_kube_controller_manager_bind_address_127_0_0_1 daemonset_container_argument_kube_controller_manager_profiling_disabled daemonset_container_argument_kube_controller_manager_root_ca_file_configured daemonset_container_argument_kube_controller_manager_service_account_credentials_enabled daemonset_container_argument_kube_controller_manager_service_account_private_key_file_configured daemonset_container_argument_kube_scheduler_bind_address_127_0_0_1 daemonset_container_argument_kube_scheduler_profiling_disabled daemonset_container_argument_kubelet_authorization_mode_no_always_allow daemonset_container_argument_kubelet_client_ca_file_configured daemonset_container_argument_kubelet_client_certificate_and_key_configured daemonset_container_argument_kubelet_https_enabled daemonset_container_argument_kubelet_read_only_port_0 daemonset_container_argument_kubelet_terminated_pod_gc_threshold_configured daemonset_container_argument_kubelet_tls_cert_file_and_tls_private_key_file_configured daemonset_container_argument_make_iptables_util_chains_enabled daemonset_container_argument_namespace_lifecycle_enabled daemonset_container_argument_node_restriction_enabled daemonset_container_argument_pod_security_policy_enabled daemonset_container_argument_protect_kernel_defaults_enabled daemonset_container_argument_request_timeout_appropriate daemonset_container_argument_rotate_kubelet_server_certificate_enabled daemonset_container_argument_secure_port_not_0 daemonset_container_argument_security_context_deny_enabled daemonset_container_argument_service_account_enabled daemonset_container_argument_service_account_key_file_appropriate daemonset_container_argument_service_account_lookup_enabled daemonset_container_capabilities_drop_all daemonset_container_encryption_providers_configured daemonset_container_host_port_not_specified daemonset_container_image_pull_policy_always daemonset_container_image_tag_specified daemonset_container_kubelet_certificate_authority_configured daemonset_container_kubernetes_dashboard_not_deployed daemonset_container_liveness_probe daemonset_container_no_argument_basic_auth_file daemonset_container_no_argument_hostname_override_configured daemonset_container_no_argument_insecure_bind_address daemonset_container_privilege_disabled daemonset_container_privilege_escalation_disabled daemonset_container_privilege_port_mapped daemonset_container_readiness_probe daemonset_container_rotate_certificate_enabled daemonset_container_secrets_defined_as_files daemonset_container_security_context_exists daemonset_container_streaming_connection_idle_timeout_not_zero daemonset_container_strong_kube_apiserver_cryptographic_ciphers daemonset_container_strong_kubelet_cryptographic_ciphers daemonset_container_sys_admin_capability_disabled daemonset_container_token_auth_file_not_configured daemonset_container_with_added_capabilities daemonset_cpu_limit daemonset_cpu_request daemonset_default_namespace_used daemonset_default_seccomp_profile_enabled daemonset_host_network_access_disabled daemonset_hostpid_hostipc_sharing_disabled daemonset_immutable_container_filesystem daemonset_memory_limit daemonset_memory_request daemonset_non_root_container deployment_container_admission_capability_restricted deployment_container_admission_control_plugin_always_pull_images deployment_container_admission_control_plugin_no_always_admit deployment_container_arg_peer_client_cert_auth_enabled deployment_container_argument_anonymous_auth_disabled deployment_container_argument_audit_log_maxage_greater_than_30 deployment_container_argument_audit_log_maxbackup_greater_than_10 deployment_container_argument_audit_log_maxsize_greater_than_100 deployment_container_argument_audit_log_path_configured deployment_container_argument_authorization_mode_no_always_allow deployment_container_argument_authorization_mode_node deployment_container_argument_authorization_mode_rbac deployment_container_argument_etcd_auto_tls_disabled deployment_container_argument_etcd_cafile_configured deployment_container_argument_etcd_certfile_and_keyfile_configured deployment_container_argument_etcd_client_cert_auth_enabled deployment_container_argument_etcd_peer_certfile_and_peer_keyfile_configured deployment_container_argument_event_qps_less_than_5 deployment_container_argument_insecure_port_0 deployment_container_argument_kube_apiserver_etcd_certfile_and_keyfile_configured deployment_container_argument_kube_apiserver_profiling_disabled deployment_container_argument_kube_apiserver_tls_cert_file_and_tls_private_key_file_configured deployment_container_argument_kube_controller_manager_bind_address_127_0_0_1 deployment_container_argument_kube_controller_manager_profiling_disabled deployment_container_argument_kube_controller_manager_root_ca_file_configured deployment_container_argument_kube_controller_manager_service_account_credentials_enabled deployment_container_argument_kube_controller_manager_service_account_private_key_file_configured deployment_container_argument_kube_scheduler_bind_address_127_0_0_1 deployment_container_argument_kube_scheduler_profiling_disabled deployment_container_argument_kubelet_authorization_mode_no_always_allow deployment_container_argument_kubelet_client_ca_file_configured deployment_container_argument_kubelet_client_certificate_and_key_configured deployment_container_argument_kubelet_https_enabled deployment_container_argument_kubelet_read_only_port_0 deployment_container_argument_kubelet_terminated_pod_gc_threshold_configured deployment_container_argument_kubelet_tls_cert_file_and_tls_private_key_file_configured deployment_container_argument_make_iptables_util_chains_enabled deployment_container_argument_namespace_lifecycle_enabled deployment_container_argument_node_restriction_enabled deployment_container_argument_pod_security_policy_enabled deployment_container_argument_protect_kernel_defaults_enabled deployment_container_argument_request_timeout_appropriate deployment_container_argument_rotate_kubelet_server_certificate_enabled deployment_container_argument_secure_port_not_0 deployment_container_argument_security_context_deny_enabled deployment_container_argument_service_account_enabled deployment_container_argument_service_account_key_file_appropriate deployment_container_argument_service_account_lookup_enabled deployment_container_capabilities_drop_all deployment_container_encryption_providers_configured deployment_container_host_port_not_specified deployment_container_image_pull_policy_always deployment_container_image_tag_specified deployment_container_kubelet_certificate_authority_configured deployment_container_kubernetes_dashboard_not_deployed deployment_container_liveness_probe deployment_container_no_argument_basic_auth_file deployment_container_no_argument_hostname_override_configured deployment_container_no_argument_insecure_bind_address deployment_container_privilege_disabled deployment_container_privilege_escalation_disabled deployment_container_privilege_port_mapped deployment_container_readiness_probe deployment_container_rotate_certificate_enabled deployment_container_secrets_defined_as_files deployment_container_security_context_exists deployment_container_streaming_connection_idle_timeout_not_zero deployment_container_strong_kube_apiserver_cryptographic_ciphers deployment_container_strong_kubelet_cryptographic_ciphers deployment_container_sys_admin_capability_disabled deployment_container_token_auth_file_not_configured deployment_container_with_added_capabilities deployment_cpu_limit deployment_cpu_request deployment_default_namespace_used deployment_default_seccomp_profile_enabled deployment_host_network_access_disabled deployment_hostpid_hostipc_sharing_disabled deployment_immutable_container_filesystem deployment_memory_limit deployment_memory_request deployment_non_root_container deployment_replica_minimum_3 endpoint_api_serve_on_secure_port ingress_default_namespace_used ingress_nginx_annotations_all_snippets_not_used ingress_nginx_annotations_snippets_alias_not_used ingress_nginx_annotations_snippets_lua_code_not_used job_container_admission_capability_restricted job_container_admission_control_plugin_always_pull_images job_container_admission_control_plugin_no_always_admit job_container_arg_peer_client_cert_auth_enabled job_container_argument_anonymous_auth_disabled job_container_argument_audit_log_maxage_greater_than_30 job_container_argument_audit_log_maxbackup_greater_than_10 job_container_argument_audit_log_maxsize_greater_than_100 job_container_argument_audit_log_path_configured job_container_argument_authorization_mode_no_always_allow job_container_argument_authorization_mode_node job_container_argument_authorization_mode_rbac job_container_argument_etcd_auto_tls_disabled job_container_argument_etcd_cafile_configured job_container_argument_etcd_certfile_and_keyfile_configured job_container_argument_etcd_client_cert_auth_enabled job_container_argument_etcd_peer_certfile_and_peer_keyfile_configured job_container_argument_event_qps_less_than_5 job_container_argument_insecure_port_0 job_container_argument_kube_apiserver_etcd_certfile_and_keyfile_configured job_container_argument_kube_apiserver_profiling_disabled job_container_argument_kube_apiserver_tls_cert_file_and_tls_private_key_file_configured job_container_argument_kube_controller_manager_bind_address_127_0_0_1 job_container_argument_kube_controller_manager_profiling_disabled job_container_argument_kube_controller_manager_root_ca_file_configured job_container_argument_kube_controller_manager_service_account_credentials_enabled job_container_argument_kube_controller_manager_service_account_private_key_file_configured job_container_argument_kube_scheduler_bind_address_127_0_0_1 job_container_argument_kube_scheduler_profiling_disabled job_container_argument_kubelet_authorization_mode_no_always_allow job_container_argument_kubelet_client_ca_file_configured job_container_argument_kubelet_client_certificate_and_key_configured job_container_argument_kubelet_https_enabled job_container_argument_kubelet_read_only_port_0 job_container_argument_kubelet_terminated_pod_gc_threshold_configured job_container_argument_kubelet_tls_cert_file_and_tls_private_key_file_configured job_container_argument_make_iptables_util_chains_enabled job_container_argument_namespace_lifecycle_enabled job_container_argument_node_restriction_enabled job_container_argument_pod_security_policy_enabled job_container_argument_protect_kernel_defaults_enabled job_container_argument_request_timeout_appropriate job_container_argument_rotate_kubelet_server_certificate_enabled job_container_argument_secure_port_not_0 job_container_argument_security_context_deny_enabled job_container_argument_service_account_enabled job_container_argument_service_account_key_file_appropriate job_container_argument_service_account_lookup_enabled job_container_capabilities_drop_all job_container_encryption_providers_configured job_container_host_port_not_specified job_container_image_pull_policy_always job_container_image_tag_specified job_container_kubelet_certificate_authority_configured job_container_kubernetes_dashboard_not_deployed job_container_liveness_probe job_container_no_argument_basic_auth_file job_container_no_argument_hostname_override_configured job_container_no_argument_insecure_bind_address job_container_privilege_disabled job_container_privilege_escalation_disabled job_container_privilege_port_mapped job_container_readiness_probe job_container_rotate_certificate_enabled job_container_secrets_defined_as_files job_container_security_context_exists job_container_streaming_connection_idle_timeout_not_zero job_container_strong_kube_apiserver_cryptographic_ciphers job_container_strong_kubelet_cryptographic_ciphers job_container_sys_admin_capability_disabled job_container_token_auth_file_not_configured job_container_with_added_capabilities job_cpu_limit job_cpu_request job_default_namespace_used job_default_seccomp_profile_enabled job_host_network_access_disabled job_hostpid_hostipc_sharing_disabled job_immutable_container_filesystem job_memory_limit job_memory_request job_non_root_container namespace_limit_range_default_cpu_limit namespace_limit_range_default_cpu_request namespace_limit_range_default_memory_limit namespace_limit_range_default_memory_request namespace_resource_quota_cpu_limit namespace_resource_quota_cpu_request namespace_resource_quota_memory_limit namespace_resource_quota_memory_request network_policy_default_deny_egress network_policy_default_deny_ingress network_policy_default_dont_allow_egress network_policy_default_dont_allow_ingress pod_container_admission_capability_restricted pod_container_admission_control_plugin_always_pull_images pod_container_admission_control_plugin_no_always_admit pod_container_arg_peer_client_cert_auth_enabled pod_container_argument_anonymous_auth_disabled pod_container_argument_audit_log_maxage_greater_than_30 pod_container_argument_audit_log_maxbackup_greater_than_10 pod_container_argument_audit_log_maxsize_greater_than_100 pod_container_argument_audit_log_path_configured pod_container_argument_authorization_mode_no_always_allow pod_container_argument_authorization_mode_node pod_container_argument_authorization_mode_rbac pod_container_argument_etcd_auto_tls_disabled pod_container_argument_etcd_cafile_configured pod_container_argument_etcd_certfile_and_keyfile_configured pod_container_argument_etcd_client_cert_auth_enabled pod_container_argument_etcd_peer_certfile_and_peer_keyfile_configured pod_container_argument_event_qps_less_than_5 pod_container_argument_insecure_port_0 pod_container_argument_kube_apiserver_etcd_certfile_and_keyfile_configured pod_container_argument_kube_apiserver_profiling_disabled pod_container_argument_kube_apiserver_tls_cert_file_and_tls_private_key_file_configured pod_container_argument_kube_controller_manager_bind_address_127_0_0_1 pod_container_argument_kube_controller_manager_profiling_disabled pod_container_argument_kube_controller_manager_root_ca_file_configured pod_container_argument_kube_controller_manager_service_account_credentials_enabled pod_container_argument_kube_controller_manager_service_account_private_key_file_configured pod_container_argument_kube_scheduler_bind_address_127_0_0_1 pod_container_argument_kube_scheduler_profiling_disabled pod_container_argument_kubelet_authorization_mode_no_always_allow pod_container_argument_kubelet_client_ca_file_configured pod_container_argument_kubelet_client_certificate_and_key_configured pod_container_argument_kubelet_https_enabled pod_container_argument_kubelet_read_only_port_0 pod_container_argument_kubelet_terminated_pod_gc_threshold_configured pod_container_argument_kubelet_tls_cert_file_and_tls_private_key_file_configured pod_container_argument_make_iptables_util_chains_enabled pod_container_argument_namespace_lifecycle_enabled pod_container_argument_node_restriction_enabled pod_container_argument_pod_security_policy_enabled pod_container_argument_protect_kernel_defaults_enabled pod_container_argument_request_timeout_appropriate pod_container_argument_rotate_kubelet_server_certificate_enabled pod_container_argument_secure_port_not_0 pod_container_argument_security_context_deny_enabled pod_container_argument_service_account_enabled pod_container_argument_service_account_key_file_appropriate pod_container_argument_service_account_lookup_enabled pod_container_capabilities_drop_all pod_container_encryption_providers_configured pod_container_host_port_not_specified pod_container_image_pull_policy_always pod_container_image_tag_specified pod_container_kubelet_certificate_authority_configured pod_container_kubernetes_dashboard_not_deployed pod_container_liveness_probe pod_container_memory_limit pod_container_memory_request pod_container_no_argument_basic_auth_file pod_container_no_argument_hostname_override_configured pod_container_no_argument_insecure_bind_address pod_container_privilege_disabled pod_container_privilege_escalation_disabled pod_container_privilege_port_mapped pod_container_readiness_probe pod_container_rotate_certificate_enabled pod_container_run_as_user_10000 pod_container_secrets_defined_as_files pod_container_security_context_exists pod_container_streaming_connection_idle_timeout_not_zero pod_container_strong_kube_apiserver_cryptographic_ciphers pod_container_strong_kubelet_cryptographic_ciphers pod_container_sys_admin_capability_disabled pod_container_token_auth_file_not_configured pod_container_with_added_capabilities pod_default_namespace_used pod_default_seccomp_profile_enabled pod_host_network_access_disabled pod_hostpid_hostipc_sharing_disabled pod_immutable_container_filesystem pod_non_root_container pod_security_policy_allowed_host_path pod_security_policy_container_privilege_disabled pod_security_policy_container_privilege_escalation_disabled pod_security_policy_default_seccomp_profile_enabled pod_security_policy_host_network_access_disabled pod_security_policy_hostipc_sharing_disabled pod_security_policy_hostpid_hostipc_sharing_disabled pod_security_policy_hostpid_sharing_disabled pod_security_policy_immutable_container_filesystem pod_security_policy_non_root_container pod_security_policy_security_services_hardening pod_service_account_not_exist pod_service_account_token_disabled pod_service_account_token_enabled pod_template_container_admission_capability_restricted pod_template_container_admission_control_plugin_always_pull_images pod_template_container_admission_control_plugin_no_always_admit pod_template_container_argument_api_server_anonymous_auth_disabled pod_template_container_argument_api_server_etcd_certfile_and_keyfile_configured pod_template_container_argument_audit_log_maxage_greater_than_30 pod_template_container_argument_audit_log_maxbackup_greater_than_10 pod_template_container_argument_audit_log_maxsize_greater_than_100 pod_template_container_argument_audit_log_path_configured pod_template_container_argument_authorization_mode_no_always_allow pod_template_container_argument_authorization_mode_node pod_template_container_argument_authorization_mode_rbac pod_template_container_argument_bind_address_127_0_0_1 pod_template_container_argument_etcd_auto_tls_disabled pod_template_container_argument_etcd_cafile_configured pod_template_container_argument_etcd_certfile_and_keyfile_configured pod_template_container_argument_etcd_client_cert_auth_enabled pod_template_container_argument_etcd_peer_certfile_and_peer_keyfile_configured pod_template_container_argument_event_qps_less_than_5 pod_template_container_argument_insecure_port_0 pod_template_container_argument_kube_apiserver_profiling_disabled pod_template_container_argument_kube_apiserver_tls_cert_file_and_tls_private_key_file_configured pod_template_container_argument_kube_controller_manager_bind_address_127_0_0_1 pod_template_container_argument_kube_controller_manager_profiling_disabled pod_template_container_argument_kube_controller_manager_root_ca_file_configured pod_template_container_argument_kube_controller_manager_service_account_credentials_enabled pod_template_container_argument_kube_controller_manager_service_account_private_key_file_configured pod_template_container_argument_kube_scheduler_profiling_disabled pod_template_container_argument_kubelet_anonymous_auth_disabled pod_template_container_argument_kubelet_authorization_mode_no_always_allow pod_template_container_argument_kubelet_client_ca_file_configured pod_template_container_argument_kubelet_client_certificate_and_key_configured pod_template_container_argument_kubelet_https_enabled pod_template_container_argument_kubelet_read_only_port_0 pod_template_container_argument_kubelet_terminated_pod_gc_threshold_configured pod_template_container_argument_make_iptables_util_chains_enabled pod_template_container_argument_namespace_lifecycle_enabled pod_template_container_argument_node_restriction_enabled pod_template_container_argument_pod_security_policy_enabled pod_template_container_argument_protect_kernel_defaults_enabled pod_template_container_argument_request_timeout_appropriate pod_template_container_argument_rotate_kubelet_server_certificate_enabled pod_template_container_argument_secure_port_not_0 pod_template_container_argument_security_context_deny_enabled pod_template_container_argument_service_account_enabled pod_template_container_argument_service_account_key_file_appropriate pod_template_container_argument_service_account_lookup_enabled pod_template_container_argument_tls_cert_file_and_tls_private_key_file_configured pod_template_container_capabilities_drop_all pod_template_container_encryption_providers_configured pod_template_container_host_port_not_specified pod_template_container_image_pull_policy_always pod_template_container_image_tag_specified pod_template_container_kubelet_certificate_authority_configured pod_template_container_kubelet_streaming_connection_idle_timeout_not_zero pod_template_container_kubernetes_dashboard_not_deployed pod_template_container_liveness_probe pod_template_container_no_argument_basic_auth_file pod_template_container_no_argument_hostname_override_configured pod_template_container_no_argument_insecure_bind_address pod_template_container_privilege_disabled pod_template_container_privilege_escalation_disabled pod_template_container_readiness_probe pod_template_container_rotate_certificate_enabled pod_template_container_secrets_defined_as_files pod_template_container_security_context_exists pod_template_container_strong_kube_apiserver_cryptographic_ciphers pod_template_container_strong_kubelet_cryptographic_ciphers pod_template_container_sys_admin_capability_disabled pod_template_container_token_auth_file_not_configured pod_template_container_with_added_capabilities pod_template_cpu_limit pod_template_cpu_request pod_template_immutable_container_filesystem pod_template_memory_limit pod_template_memory_request pod_volume_host_path replicaset_container_admission_capability_restricted replicaset_container_admission_control_plugin_always_pull_images replicaset_container_admission_control_plugin_no_always_admit replicaset_container_arg_peer_client_cert_auth_enabled replicaset_container_argument_anonymous_auth_disabled replicaset_container_argument_audit_log_maxage_greater_than_30 replicaset_container_argument_audit_log_maxbackup_greater_than_10 replicaset_container_argument_audit_log_maxsize_greater_than_100 replicaset_container_argument_audit_log_path_configured replicaset_container_argument_authorization_mode_no_always_allow replicaset_container_argument_authorization_mode_node replicaset_container_argument_authorization_mode_rbac replicaset_container_argument_etcd_auto_tls_disabled replicaset_container_argument_etcd_cafile_configured replicaset_container_argument_etcd_certfile_and_keyfile_configured replicaset_container_argument_etcd_client_cert_auth_enabled replicaset_container_argument_etcd_peer_certfile_and_peer_keyfile_configured replicaset_container_argument_event_qps_less_than_5 replicaset_container_argument_insecure_port_0 replicaset_container_argument_kube_apiserver_etcd_certfile_and_keyfile_configured replicaset_container_argument_kube_apiserver_profiling_disabled replicaset_container_argument_kube_apiserver_tls_cert_file_and_tls_private_key_file_configured replicaset_container_argument_kube_controller_manager_bind_address_127_0_0_1 replicaset_container_argument_kube_controller_manager_profiling_disabled replicaset_container_argument_kube_controller_manager_root_ca_file_configured replicaset_container_argument_kube_controller_manager_service_account_credentials_enabled replicaset_container_argument_kube_controller_manager_service_account_private_key_file_configured replicaset_container_argument_kube_scheduler_bind_address_127_0_0_1 replicaset_container_argument_kube_scheduler_profiling_disabled replicaset_container_argument_kubelet_authorization_mode_no_always_allow replicaset_container_argument_kubelet_client_ca_file_configured replicaset_container_argument_kubelet_client_certificate_and_key_configured replicaset_container_argument_kubelet_https_enabled replicaset_container_argument_kubelet_read_only_port_0 replicaset_container_argument_kubelet_terminated_pod_gc_threshold_configured replicaset_container_argument_kubelet_tls_cert_file_and_tls_private_key_file_configured replicaset_container_argument_make_iptables_util_chains_enabled replicaset_container_argument_namespace_lifecycle_enabled replicaset_container_argument_node_restriction_enabled replicaset_container_argument_pod_security_policy_enabled replicaset_container_argument_protect_kernel_defaults_enabled replicaset_container_argument_request_timeout_appropriate replicaset_container_argument_rotate_kubelet_server_certificate_enabled replicaset_container_argument_secure_port_not_0 replicaset_container_argument_security_context_deny_enabled replicaset_container_argument_service_account_enabled replicaset_container_argument_service_account_key_file_appropriate replicaset_container_argument_service_account_lookup_enabled replicaset_container_capabilities_drop_all replicaset_container_encryption_providers_configured replicaset_container_host_port_not_specified replicaset_container_image_pull_policy_always replicaset_container_image_tag_specified replicaset_container_kubelet_certificate_authority_configured replicaset_container_kubernetes_dashboard_not_deployed replicaset_container_liveness_probe replicaset_container_no_argument_basic_auth_file replicaset_container_no_argument_hostname_override_configured replicaset_container_no_argument_insecure_bind_address replicaset_container_privilege_disabled replicaset_container_privilege_escalation_disabled replicaset_container_privilege_port_mapped replicaset_container_readiness_probe replicaset_container_rotate_certificate_enabled replicaset_container_secrets_defined_as_files replicaset_container_security_context_exists replicaset_container_streaming_connection_idle_timeout_not_zero replicaset_container_strong_kube_apiserver_cryptographic_ciphers replicaset_container_strong_kubelet_cryptographic_ciphers replicaset_container_sys_admin_capability_disabled replicaset_container_token_auth_file_not_configured replicaset_container_with_added_capabilities replicaset_cpu_limit replicaset_cpu_request replicaset_default_namespace_used replicaset_default_seccomp_profile_enabled replicaset_host_network_access_disabled replicaset_hostpid_hostipc_sharing_disabled replicaset_immutable_container_filesystem replicaset_memory_limit replicaset_memory_request replicaset_non_root_container replication_controller_container_admission_capability_restricted replication_controller_container_admission_control_plugin_always_pull_images replication_controller_container_admission_control_plugin_no_always_admit replication_controller_container_arg_peer_client_cert_auth_enabled replication_controller_container_argument_anonymous_auth_disabled replication_controller_container_argument_audit_log_maxage_greater_than_30 replication_controller_container_argument_audit_log_maxbackup_greater_than_10 replication_controller_container_argument_audit_log_maxsize_greater_than_100 replication_controller_container_argument_audit_log_path_configured replication_controller_container_argument_authorization_mode_no_always_allow replication_controller_container_argument_authorization_mode_node replication_controller_container_argument_authorization_mode_rbac replication_controller_container_argument_etcd_auto_tls_disabled replication_controller_container_argument_etcd_cafile_configured replication_controller_container_argument_etcd_certfile_and_keyfile_configured replication_controller_container_argument_etcd_client_cert_auth_enabled replication_controller_container_argument_etcd_peer_certfile_and_peer_keyfile_configured replication_controller_container_argument_event_qps_less_than_5 replication_controller_container_argument_insecure_port_0 replication_controller_container_argument_kube_apiserver_etcd_certfile_and_keyfile_configured replication_controller_container_argument_kube_apiserver_profiling_disabled replication_controller_container_argument_kube_apiserver_tls_cert_file_and_tls_private_key_file_configured replication_controller_container_argument_kube_controller_manager_bind_address_127_0_0_1 replication_controller_container_argument_kube_controller_manager_profiling_disabled replication_controller_container_argument_kube_controller_manager_root_ca_file_configured replication_controller_container_argument_kube_controller_manager_service_account_credentials_enabled replication_controller_container_argument_kube_controller_manager_service_account_private_key_file_configured replication_controller_container_argument_kube_scheduler_bind_address_127_0_0_1 replication_controller_container_argument_kube_scheduler_profiling_disabled replication_controller_container_argument_kubelet_authorization_mode_no_always_allow replication_controller_container_argument_kubelet_client_ca_file_configured replication_controller_container_argument_kubelet_client_certificate_and_key_configured replication_controller_container_argument_kubelet_https_enabled replication_controller_container_argument_kubelet_read_only_port_0 replication_controller_container_argument_kubelet_terminated_pod_gc_threshold_configured replication_controller_container_argument_kubelet_tls_cert_file_and_tls_private_key_file_configured replication_controller_container_argument_make_iptables_util_chains_enabled replication_controller_container_argument_namespace_lifecycle_enabled replication_controller_container_argument_node_restriction_enabled replication_controller_container_argument_pod_security_policy_enabled replication_controller_container_argument_protect_kernel_defaults_enabled replication_controller_container_argument_request_timeout_appropriate replication_controller_container_argument_rotate_kubelet_server_certificate_enabled replication_controller_container_argument_secure_port_not_0 replication_controller_container_argument_security_context_deny_enabled replication_controller_container_argument_service_account_enabled replication_controller_container_argument_service_account_key_file_appropriate replication_controller_container_argument_service_account_lookup_enabled replication_controller_container_capabilities_drop_all replication_controller_container_encryption_providers_configured replication_controller_container_host_port_not_specified replication_controller_container_image_pull_policy_always replication_controller_container_image_tag_specified replication_controller_container_kubelet_certificate_authority_configured replication_controller_container_kubernetes_dashboard_not_deployed replication_controller_container_liveness_probe replication_controller_container_no_argument_basic_auth_file replication_controller_container_no_argument_hostname_override_configured replication_controller_container_no_argument_insecure_bind_address replication_controller_container_privilege_disabled replication_controller_container_privilege_escalation_disabled replication_controller_container_privilege_port_mapped replication_controller_container_readiness_probe replication_controller_container_rotate_certificate_enabled replication_controller_container_secrets_defined_as_files replication_controller_container_security_context_exists replication_controller_container_streaming_connection_idle_timeout_not_zero replication_controller_container_strong_kube_apiserver_cryptographic_ciphers replication_controller_container_strong_kubelet_cryptographic_ciphers replication_controller_container_sys_admin_capability_disabled replication_controller_container_token_auth_file_not_configured replication_controller_container_with_added_capabilities replication_controller_cpu_limit replication_controller_cpu_request replication_controller_default_namespace_used replication_controller_default_seccomp_profile_enabled replication_controller_host_network_access_disabled replication_controller_hostpid_hostipc_sharing_disabled replication_controller_immutable_container_filesystem replication_controller_memory_limit replication_controller_memory_request replication_controller_non_root_container role_binding_default_namespace_used role_binding_default_service_account_binding_not_active role_default_namespace_used role_with_bind_cluster_role_bindings role_with_rbac_approve_certificate_signing_requests role_with_rbac_escalate_permissions role_with_wildcards_used secret_default_namespace_used service_account_default_namespace_used service_account_token_disabled service_default_namespace_used service_no_tiller_deployed service_no_tiller_service service_type_forbidden statefulset_container_admission_capability_restricted statefulset_container_admission_control_plugin_always_pull_images statefulset_container_admission_control_plugin_no_always_admit statefulset_container_arg_peer_client_cert_auth_enabled statefulset_container_argument_anonymous_auth_disabled statefulset_container_argument_audit_log_maxage_greater_than_30 statefulset_container_argument_audit_log_maxbackup_greater_than_10 statefulset_container_argument_audit_log_maxsize_greater_than_100 statefulset_container_argument_audit_log_path_configured statefulset_container_argument_authorization_mode_no_always_allow statefulset_container_argument_authorization_mode_node statefulset_container_argument_authorization_mode_rbac statefulset_container_argument_etcd_auto_tls_disabled statefulset_container_argument_etcd_cafile_configured statefulset_container_argument_etcd_certfile_and_keyfile_configured statefulset_container_argument_etcd_client_cert_auth_enabled statefulset_container_argument_etcd_peer_certfile_and_peer_keyfile_configured statefulset_container_argument_event_qps_less_than_5 statefulset_container_argument_insecure_port_0 statefulset_container_argument_kube_apiserver_etcd_certfile_and_keyfile_configured statefulset_container_argument_kube_apiserver_profiling_disabled statefulset_container_argument_kube_apiserver_tls_cert_file_and_tls_private_key_file_configured statefulset_container_argument_kube_controller_manager_bind_address_127_0_0_1 statefulset_container_argument_kube_controller_manager_profiling_disabled statefulset_container_argument_kube_controller_manager_root_ca_file_configured statefulset_container_argument_kube_controller_manager_service_account_credentials_enabled statefulset_container_argument_kube_controller_manager_service_account_private_key_file_configured statefulset_container_argument_kube_scheduler_bind_address_127_0_0_1 statefulset_container_argument_kube_scheduler_profiling_disabled statefulset_container_argument_kubelet_authorization_mode_no_always_allow statefulset_container_argument_kubelet_client_ca_file_configured statefulset_container_argument_kubelet_client_certificate_and_key_configured statefulset_container_argument_kubelet_https_enabled statefulset_container_argument_kubelet_read_only_port_0 statefulset_container_argument_kubelet_terminated_pod_gc_threshold_configured statefulset_container_argument_kubelet_tls_cert_file_and_tls_private_key_file_configured statefulset_container_argument_make_iptables_util_chains_enabled statefulset_container_argument_namespace_lifecycle_enabled statefulset_container_argument_node_restriction_enabled statefulset_container_argument_pod_security_policy_enabled statefulset_container_argument_protect_kernel_defaults_enabled statefulset_container_argument_request_timeout_appropriate statefulset_container_argument_rotate_kubelet_server_certificate_enabled statefulset_container_argument_secure_port_not_0 statefulset_container_argument_security_context_deny_enabled statefulset_container_argument_service_account_enabled statefulset_container_argument_service_account_key_file_appropriate statefulset_container_argument_service_account_lookup_enabled statefulset_container_capabilities_drop_all statefulset_container_encryption_providers_configured statefulset_container_host_port_not_specified statefulset_container_image_pull_policy_always statefulset_container_image_tag_specified statefulset_container_kubelet_certificate_authority_configured statefulset_container_kubernetes_dashboard_not_deployed statefulset_container_liveness_probe statefulset_container_no_argument_basic_auth_file statefulset_container_no_argument_hostname_override_configured statefulset_container_no_argument_insecure_bind_address statefulset_container_privilege_disabled statefulset_container_privilege_escalation_disabled statefulset_container_privilege_port_mapped statefulset_container_readiness_probe statefulset_container_rotate_certificate_enabled statefulset_container_secrets_defined_as_files statefulset_container_security_context_exists statefulset_container_streaming_connection_idle_timeout_not_zero statefulset_container_strong_kube_apiserver_cryptographic_ciphers statefulset_container_strong_kubelet_cryptographic_ciphers statefulset_container_sys_admin_capability_disabled statefulset_container_token_auth_file_not_configured statefulset_container_with_added_capabilities statefulset_cpu_limit statefulset_cpu_request statefulset_default_namespace_used statefulset_default_seccomp_profile_enabled statefulset_host_network_access_disabled statefulset_hostpid_hostipc_sharing_disabled statefulset_immutable_container_filesystem statefulset_memory_limit statefulset_memory_request statefulset_non_root_container

Queries in Kubernetes Compliance

The Kubernetes Compliance mod includes 781 queries: