> ## Documentation Index
> Fetch the complete documentation index at: https://cloudanix.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Kubernetes Misconfig

### Checks Performed

* [An Admission Policy Engine Should Enforce Workload Policy](kubernetesmisconfig/rules/kubernetes_admission_policy_engine_enforced)
* [API Server Audit Log Maxage Should Be 30 Or More](kubernetesmisconfig/rules/kubernetes_apiserver_audit_log_maxage)
* [API Server Audit Log Maxbackup Should Be 10 Or More](kubernetesmisconfig/rules/kubernetes_apiserver_audit_log_maxbackup)
* [API Server Audit Log Maxsize Should Be 100 Or More](kubernetesmisconfig/rules/kubernetes_apiserver_audit_log_maxsize)
* [API Server Authorization Mode Should Include Node](kubernetesmisconfig/rules/kubernetes_apiserver_authorization_mode_node)
* [API Server Authorization Mode Should Include RBAC](kubernetesmisconfig/rules/kubernetes_apiserver_authorization_mode_rbac)
* [API Server Authorization Mode Should Not Be AlwaysAllow](kubernetesmisconfig/rules/kubernetes_apiserver_authorization_mode_not_alwaysallow)
* [API Server Encryption Providers Should Be Appropriately Configured](kubernetesmisconfig/rules/kubernetes_apiserver_encryption_providers_configured)
* [API Server Pod Specification File Ownership Should Be root:root](kubernetesmisconfig/rules/kubernetes_apiserver_pod_spec_file_ownership)
* [API Server Pod Specification File Permissions Should Be 600 Or More Restrictive](kubernetesmisconfig/rules/kubernetes_apiserver_pod_spec_file_permissions)
* [API Server Request Timeout Should Be Set As Appropriate](kubernetesmisconfig/rules/kubernetes_apiserver_request_timeout)
* [API Server Service Account Key File Should Be Set](kubernetesmisconfig/rules/kubernetes_apiserver_service_account_key_file)
* [API Server Service Account Lookup Should Be True](kubernetesmisconfig/rules/kubernetes_apiserver_service_account_lookup)
* [API Server Should Disable Anonymous Authentication](kubernetesmisconfig/rules/kubernetes_apiserver_anonymous_auth_disabled)
* [API Server Should Disable Profiling](kubernetesmisconfig/rules/kubernetes_apiserver_profiling_disabled)
* [API Server Should Disable Service Account Extend Token Expiration](kubernetesmisconfig/rules/kubernetes_apiserver_service_account_extend_token_expiration)
* [API Server Should Enable The AlwaysPullImages Admission Plugin](kubernetesmisconfig/rules/kubernetes_apiserver_admission_alwayspullimages)
* [API Server Should Enable The DenyServiceExternalIPs Admission Plugin](kubernetesmisconfig/rules/kubernetes_apiserver_deny_service_external_ips)
* [API Server Should Enable The EventRateLimit Admission Plugin](kubernetesmisconfig/rules/kubernetes_apiserver_admission_eventratelimit)
* [API Server Should Enable The NamespaceLifecycle Admission Plugin](kubernetesmisconfig/rules/kubernetes_apiserver_admission_namespacelifecycle)
* [API Server Should Enable The NodeRestriction Admission Plugin](kubernetesmisconfig/rules/kubernetes_apiserver_admission_noderestriction)
* [API Server Should Enable The ServiceAccount Admission Plugin](kubernetesmisconfig/rules/kubernetes_apiserver_admission_serviceaccount)
* [API Server Should Not Enable The AlwaysAdmit Admission Plugin](kubernetesmisconfig/rules/kubernetes_apiserver_admission_alwaysadmit_not_set)
* [API Server Should Set An Audit Log Path](kubernetesmisconfig/rules/kubernetes_apiserver_audit_log_path)
* [API Server Should Set Client CA File](kubernetesmisconfig/rules/kubernetes_apiserver_client_ca_file)
* [API Server Should Set Encryption Provider Config](kubernetesmisconfig/rules/kubernetes_apiserver_encryption_provider_config)
* [API Server Should Set Etcd CA File](kubernetesmisconfig/rules/kubernetes_apiserver_etcd_cafile)
* [API Server Should Set Etcd Client Certificate And Key](kubernetesmisconfig/rules/kubernetes_apiserver_etcd_certfile_keyfile)
* [API Server Should Set Kubelet Certificate Authority](kubernetesmisconfig/rules/kubernetes_apiserver_kubelet_certificate_authority)
* [API Server Should Set Kubelet Client Certificate And Key](kubernetesmisconfig/rules/kubernetes_apiserver_kubelet_client_cert)
* [API Server Should Set TLS Certificate And Private Key](kubernetesmisconfig/rules/kubernetes_apiserver_tls_cert_file)
* [API Server Should Use Strong Cryptographic Ciphers](kubernetesmisconfig/rules/kubernetes_apiserver_strong_cipher_suites)
* [API Server Token Auth File Should Not Be Set](kubernetesmisconfig/rules/kubernetes_apiserver_token_auth_file_not_set)
* [Apply Security Context For Pods And Containers](kubernetesmisconfig/rules/apply_security_context_your_pods_containers)
* [Apply SecurityContext To Your Pods And Containers](kubernetesmisconfig/rules/kubernetes_apply_security_context_to_pods_and_containers)
* [Audit Logging Should Be Enabled And Shipped Off-Cluster](kubernetesmisconfig/rules/kubernetes_audit_logging_shipped_offcluster)
* [Avoid Use Of System Masters Group](kubernetesmisconfig/rules/avoid_use_system_masters_group)
* [Avoid Use Of The System:Masters Group](kubernetesmisconfig/rules/kubernetes_avoid_use_of_system_masters_group)
* [Bootstrap Token Authentication Should Not Be Used For Users](kubernetesmisconfig/rules/kubernetes_bootstrap_token_authentication_for_users)
* [Certificate Authorities File Permissions Set To 644 Or More Restrictive](kubernetesmisconfig/rules/kubernetes_client_ca_file_permissions_644)
* [Client Certificate Authentication Should Not Be Used For Users](kubernetesmisconfig/rules/client_certificate_authentication_should_not_used_users)
* [Client Certificate Authentication Should Not Be Used For Users](kubernetesmisconfig/rules/kubernetes_client_certificate_authentication_for_users)
* [Client Certificate Authorities File Ownership Set To root:root](kubernetesmisconfig/rules/kubernetes_client_ca_file_ownership_root)
* [Configure Image Provenance ImagePolicyWebhook Admission Controller](kubernetesmisconfig/rules/configure_image_provenance_imagepolicywebhook_admission_controller)
* [Configure Image Provenance Using ImagePolicyWebhook Admission Controller](kubernetesmisconfig/rules/kubernetes_configure_image_provenance_with_imagepolicywebhook)
* [Consider External Secret Storage](kubernetesmisconfig/rules/consider_external_secret_storage)
* [Consider External Secret Storage](kubernetesmisconfig/rules/kubernetes_consider_external_secret_storage)
* [Container Images Should Not Use The latest Or Untagged Tag](kubernetesmisconfig/rules/kubernetes_no_latest_image_tag)
* [Container Network Interface File Ownership Should Be root:root](kubernetesmisconfig/rules/kubernetes_cni_file_ownership)
* [Container Network Interface File Permissions Should Be 600 Or More Restrictive](kubernetesmisconfig/rules/kubernetes_cni_file_permissions)
* [Containers Should Define Liveness And Readiness Probes](kubernetesmisconfig/rules/kubernetes_define_liveness_readiness_probes)
* [Containers Should Disallow Privilege Escalation](kubernetesmisconfig/rules/kubernetes_disallow_privilege_escalation)
* [Containers Should Drop All Linux Capabilities](kubernetesmisconfig/rules/kubernetes_drop_all_capabilities)
* [Containers Should Not Run In Privileged Mode](kubernetesmisconfig/rules/kubernetes_no_privileged_container)
* [Containers Should Run As Non-Root](kubernetesmisconfig/rules/kubernetes_container_run_as_nonroot)
* [Containers Should Set CPU And Memory Limits](kubernetesmisconfig/rules/kubernetes_set_resource_limits)
* [Containers Should Set CPU And Memory Requests](kubernetesmisconfig/rules/kubernetes_set_resource_requests)
* [Containers Should Use A Read-Only Root Filesystem](kubernetesmisconfig/rules/kubernetes_readonly_root_filesystem)
* [Controller Manager Bind Address Should Be 127.0.0.1](kubernetesmisconfig/rules/kubernetes_controllermanager_bind_address)
* [Controller Manager Kubeconfig File Ownership Should Be root:root](kubernetesmisconfig/rules/kubernetes_controllermanager_kubeconfig_file_ownership)
* [Controller Manager Kubeconfig File Permissions Should Be 600 Or More Restrictive](kubernetesmisconfig/rules/kubernetes_controllermanager_kubeconfig_file_permissions)
* [Controller Manager Pod Specification File Ownership Should Be root:root](kubernetesmisconfig/rules/kubernetes_controllermanager_pod_spec_file_ownership)
* [Controller Manager Pod Specification File Permissions Should Be 600 Or More Restrictive](kubernetesmisconfig/rules/kubernetes_controllermanager_pod_spec_file_permissions)
* [Controller Manager Should Disable Profiling](kubernetesmisconfig/rules/kubernetes_controllermanager_profiling_disabled)
* [Controller Manager Should Enable RotateKubeletServerCertificate](kubernetesmisconfig/rules/kubernetes_controllermanager_rotate_kubelet_server_certificate)
* [Controller Manager Should Set Root CA File](kubernetesmisconfig/rules/kubernetes_controllermanager_root_ca_file)
* [Controller Manager Should Set Service Account Private Key File](kubernetesmisconfig/rules/kubernetes_controllermanager_service_account_private_key_file)
* [Controller Manager Should Use Individual Service Account Credentials](kubernetesmisconfig/rules/kubernetes_controllermanager_use_service_account_credentials)
* [Controller Manager Terminated Pod GC Threshold Should Be Set](kubernetesmisconfig/rules/kubernetes_controllermanager_terminated_pod_gc_threshold)
* [Create Administrative Boundaries Between Resources Namespaces](kubernetesmisconfig/rules/create_administrative_boundaries_between_resources_namespaces)
* [Create Administrative Boundaries Between Resources Using Namespaces](kubernetesmisconfig/rules/kubernetes_create_administrative_boundaries_using_namespaces)
* [Default Administrative Credential File Ownership Should Be root:root](kubernetesmisconfig/rules/kubernetes_admin_conf_file_ownership)
* [Default Administrative Credential File Permissions Should Be 600](kubernetesmisconfig/rules/kubernetes_admin_conf_file_permissions)
* [Ensure A Unique Certificate Authority Is Used For Etcd](kubernetesmisconfig/rules/kubernetes_etcd_unique_certificate_authority)
* [Ensure Admin Configuration File Ownership Is Root](kubernetesmisconfig/rules/admin_conf_file_ownership_root)
* [Ensure Admin Configuration File Permissions Are 600](kubernetesmisconfig/rules/admin_conf_file_permissions_are_600)
* [Ensure Admission Control Plugin AlwaysAdmit Is Not Set](kubernetesmisconfig/rules/ensure_admission_control_plugin_alwaysadmit_is_not_set)
* [Ensure Admission Control Plugin AlwaysPullImages Is Set](kubernetesmisconfig/rules/ensure_admission_control_plugin_alwayspullimages_is_set)
* [Ensure Admission Control Plugin EventRateLimit Is Set](kubernetesmisconfig/rules/ensure_admission_control_plugin_eventratelimit_is_set)
* [Ensure Admission Control Plugin NamespaceLifecycle Is Set](kubernetesmisconfig/rules/ensure_admission_control_plugin_namespacelifecycle_is_set)
* [Ensure Admission Control Plugin NodeRestriction Is Set](kubernetesmisconfig/rules/ensure_admission_control_plugin_noderestriction_is_set)
* [Ensure Admission Control Plugin SecurityContextDeny Is Set If PodSecurityPolicy Is Not Used](kubernetesmisconfig/rules/ensure_admission_control_plugin_securitycontextdeny_is_set_unless_podsecuritypolicy_is_set)
* [Ensure Admission Control Plugin ServiceAccount Is Set](kubernetesmisconfig/rules/ensure_admission_control_plugin_serviceaccount_is_set)
* [Ensure All Namespaces Have NetworkPolicies Defined](kubernetesmisconfig/rules/kubernetes_all_namespaces_have_network_policies)
* [Ensure All Namespaces Network Policies Defined](kubernetesmisconfig/rules/ensure_namespaces_network_policies_defined)
* [Ensure Anonymous Auth Argument Is Disabled](kubernetesmisconfig/rules/ensure_anonymous_auth_argument_is_disabled)
* [Ensure Anonymous Auth Argument Is False](kubernetesmisconfig/rules/ensure_anonymous_auth_argument_is_false)
* [Ensure API Server Only Uses Strong Cryptographic Ciphers](kubernetesmisconfig/rules/ensure_api_server_use_strong_cryptographic_ciphers)
* [Ensure API Server Pod Specification File Ownership Is Root](kubernetesmisconfig/rules/api_server_pod_specification_file_ownership_root)
* [Ensure API Server Pod Specification Permissions Are Restrictive](kubernetesmisconfig/rules/api_server_pod_specification_permissions_are_restrictive)
* [Ensure Audit Log Maxage Argument Is Appropriate](kubernetesmisconfig/rules/ensure_audit_log_maxage_argument_is_appropriate)
* [Ensure Audit Log Maxbackup Argument Is Appropriate](kubernetesmisconfig/rules/ensure_audit_log_maxbackup_argument_is_appropriate)
* [Ensure Audit Log Path Argument Is Set](kubernetesmisconfig/rules/ensure_api_server_audit_log_path_is_set)
* [Ensure Audit Policy Covers Key Security Concerns](kubernetesmisconfig/rules/ensure_audit_policy_covers_key_security_concerns)
* [Ensure Audit-Log-Maxsize Argument Is Appropriate](kubernetesmisconfig/rules/ensure_audit_log_maxsize_argument_is_appropriate)
* [Ensure Authorization Mode Argument Includes Node](kubernetesmisconfig/rules/ensure_authorization_mode_argument_includes_node)
* [Ensure Authorization Mode Argument Includes RBAC](kubernetesmisconfig/rules/ensure_authorization_mode_argument_includes_rbac)
* [Ensure Authorization Mode Argument Is Not AlwaysAllow](kubernetesmisconfig/rules/ensure_authorization_mode_argument_is_alwaysallow)
* [Ensure Authorization Mode Argument Is Not AlwaysAllow](kubernetesmisconfig/rules/ensure_authorization_mode_argument_is_not_alwaysallow)
* [Ensure Auto Tls Argument Is Disabled](kubernetesmisconfig/rules/ensure_auto_tls_argument_is_disabled)
* [Ensure Bind Address Argument Is 127.0.0.1](kubernetesmisconfig/rules/ensure_bind_address_argument_127_0_0_1)
* [Ensure Bind Address Argument Is 127.0.0.1](kubernetesmisconfig/rules/ensure_bind_address_argument_is_127_0_0_1)
* [Ensure Cert File And Key File Arguments Are Appropriate](kubernetesmisconfig/rules/ensure_cert_file_and_key_file_arguments_are_appropriate)
* [Ensure Certificate Authorities File Permissions Are Restrictive](kubernetesmisconfig/rules/ensure_certificate_authorities_file_permissions_are_restrictive)
* [Ensure Client Ca File Argument Is Appropriate](kubernetesmisconfig/rules/api_server_client_ca_file_argument_is_appropriate)
* [Ensure Client Ca File Argument Is Appropriate](kubernetesmisconfig/rules/ensure_kubelet_client_ca_file_argument_is_appropriate)
* [Ensure Client Cert Auth Argument Is Enabled](kubernetesmisconfig/rules/ensure_client_cert_auth_argument_is_enabled)
* [Ensure Client Certificate Authorities File Ownership Is Root](kubernetesmisconfig/rules/ensure_client_certificate_authorities_file_ownership_is_root)
* [Ensure Cluster Active Policy Control Mechanisms In Place](kubernetesmisconfig/rules/ensure_cluster_least_active_policy_control_mechanism_place)
* [Ensure Cluster Admin Role Is Only Used Where Required](kubernetesmisconfig/rules/ensure_cluster_admin_role_required)
* [Ensure CNI Supports Network Policies](kubernetesmisconfig/rules/ensure_cni_supports_network_policies)
* [Ensure Container Network Interface File Ownership Is Root](kubernetesmisconfig/rules/container_network_interface_file_ownership_is_root)
* [Ensure Container Network Interface File Permissions Are Restrictive](kubernetesmisconfig/rules/container_network_interface_file_permissions_are_restrictive)
* [Ensure Controller Manager Configuration File Ownership Is Root](kubernetesmisconfig/rules/controller_manager_conf_file_ownership_root)
* [Ensure Controller Manager Configuration File Permissions Are Restrictive](kubernetesmisconfig/rules/controller_manager_conf_file_permissions_are_restrictive)
* [Ensure Controller Manager Pod Specification File Ownership Is Root](kubernetesmisconfig/rules/controller_manager_pod_specification_file_ownership_root)
* [Ensure Controller Manager Pod Specification File Permissions Are Restrictive](kubernetesmisconfig/rules/controller_manager_pod_specification_file_permissions_are_restrictive)
* [Ensure Controller Profiling Argument Is False](kubernetesmisconfig/rules/ensure_controller_profiling_argument_is_disabled)
* [Ensure Default Service Accounts Are Not Actively Used](kubernetesmisconfig/rules/kubernetes_default_service_accounts_not_actively_used)
* [Ensure Default Service Accounts Are Not Actively Used.](kubernetesmisconfig/rules/ensure_default_service_accounts_are_not_actively_used)
* [Ensure DenyServiceExternalIPs Is Not Set](kubernetesmisconfig/rules/ensure_denyserviceexternalips_is_not_set)
* [Ensure Encryption Provider Config Argument Is Appropriate](kubernetesmisconfig/rules/ensure_encryption_provider_config_argument_is_appropriate)
* [Ensure Encryption Providers Are Appropriately Configured](kubernetesmisconfig/rules/ensure_encryption_providers_are_appropriately_configured)
* [Ensure Etcd Auto-TLS Argument Is Not Set To True](kubernetesmisconfig/rules/kubernetes_etcd_auto_tls_disabled)
* [Ensure Etcd Cafile Argument Is Appropriate](kubernetesmisconfig/rules/ensure_etcd_cafile_argument_is_appropriate)
* [Ensure Etcd Cert-File And Key-File Arguments Are Set](kubernetesmisconfig/rules/kubernetes_etcd_cert_file_and_key_file_set)
* [Ensure Etcd Certfile And Etcd Keyfile Arguments Are Appropriate](kubernetesmisconfig/rules/ensure_etcd_certfile_and_keyfile_arguments_are_appropriate)
* [Ensure Etcd Client-Cert-Auth Argument Is Set To True](kubernetesmisconfig/rules/kubernetes_etcd_client_cert_auth_enabled)
* [Ensure Etcd Data Directory Ownership Is Etcd](kubernetesmisconfig/rules/etcd_data_directory_ownership_is_etcd)
* [Ensure Etcd Data Directory Permissions Are Restrictive](kubernetesmisconfig/rules/etcd_data_directory_permissions_are_restrictive)
* [Ensure Etcd Peer-Auto-TLS Argument Is Not Set To True](kubernetesmisconfig/rules/kubernetes_etcd_peer_auto_tls_disabled)
* [Ensure Etcd Peer-Cert-File And Peer-Key-File Arguments Are Set](kubernetesmisconfig/rules/kubernetes_etcd_peer_cert_file_and_key_file_set)
* [Ensure Etcd Peer-Client-Cert-Auth Argument Is Set To True](kubernetesmisconfig/rules/kubernetes_etcd_peer_client_cert_auth_enabled)
* [Ensure Etcd Pod Specification File Ownership Is Root](kubernetesmisconfig/rules/etcd_pod_specification_file_ownership_is_root)
* [Ensure Etcd Pod Specification File Permissions Are Restrictive](kubernetesmisconfig/rules/etcd_pod_specification_file_permissions_are_restrictive)
* [Ensure EventRecordQPS Argument Is Level Which Ensures Appropriate Event Capture](kubernetesmisconfig/rules/ensure_eventrecordqps_argument_which_ensures_appropriate_event_capture)
* [Ensure Hostname Override Argument Is Disabled](kubernetesmisconfig/rules/ensure_hostname_override_argument_is_disabled)
* [Ensure Kubeconfig Kubelet Conf File Ownership Is Root](kubernetesmisconfig/rules/ensure_kubeconfig_kubelet_conf_file_ownership_is_root)
* [Ensure Kubeconfig Kubelet Conf File Permissions Are Restrictive](kubernetesmisconfig/rules/ensure_kubeconfig_kubelet_conf_file_permissions_are_restrictive)
* [Ensure Kubelet Certificate Authority Argument Is Appropriate](kubernetesmisconfig/rules/ensure_kubelet_certificate_authority_argument_is_appropriate)
* [Ensure Kubelet Client Certificate And Key Arguments Are Appropriate](kubernetesmisconfig/rules/kubelet_client_certificate_kubeletclient_key_arguments_are_appropriate)
* [Ensure Kubelet Config File Ownership Is Root](kubernetesmisconfig/rules/check_kubelet_config_configuration_used_validate_file_ownership_root)
* [Ensure Kubelet Config File Permissions Are Restrictive](kubernetesmisconfig/rules/check_kubelet_config_configuration_file_used_validate_permissions_restrictive)
* [Ensure Kubelet Https Argument Is Enabled](kubernetesmisconfig/rules/ensure_kubelet_https_argument_enabled)
* [Ensure Kubelet Only Makes Use Strong Cryptographic Ciphers](kubernetesmisconfig/rules/ensure_kubelet_strong_cryptographic_ciphers)
* [Ensure Kubelet Service File Ownership Is Root](kubernetesmisconfig/rules/ensure_kubelet_service_file_ownership_is_root)
* [Ensure Kubelet Service File Permissions Are Restrictive](kubernetesmisconfig/rules/ensure_kubelet_service_file_permissions_are_restrictive)
* [Ensure Kubernetes PKI Certificate File Permissions Are Restrictive](kubernetesmisconfig/rules/kubernetes_pki_certificate_file_permissions_are_restrictive)
* [Ensure Kubernetes PKI Directory And File Ownership Is Root](kubernetesmisconfig/rules/kubernetes_pki_directory_file_ownership_is_root)
* [Ensure Kubernetes PKI Key File Permissions Are 600](kubernetesmisconfig/rules/kubernetes_pki_key_file_permissions_are_600)
* [Ensure Make Iptables Util Chains Argument Is Enabled](kubernetesmisconfig/rules/ensure_make_iptables_util_chains_argument_is_enabled)
* [Ensure Minimal Audit Policy Is Created](kubernetesmisconfig/rules/ensure_minimal_audit_policy_is_created)
* [Ensure Peer Auto Tls Argument Is Disabled](kubernetesmisconfig/rules/ensure_peer_auto_tls_argument_is_disabled)
* [Ensure Peer Cert File And Peer Key File Arguments Are Appropriate](kubernetesmisconfig/rules/ensure_peer_cert_file_peer_key_file_arguments_are_appropriate)
* [Ensure Peer Client Cert Auth Argument Is Enabled](kubernetesmisconfig/rules/ensure_peer_client_cert_auth_argument_is_enabled)
* [Ensure Profiling Argument Is Disabled](kubernetesmisconfig/rules/ensure_scheduler_profiling_argument_is_disabled)
* [Ensure Profiling Argument Is Set False](kubernetesmisconfig/rules/ensure_profiling_argument_disabled)
* [Ensure Protect Kernel Defaults Argument Is Enabled](kubernetesmisconfig/rules/ensure_protect_kernel_defaults_argument_is_enabled)
* [Ensure Request Timeout Argument Is Appropriate](kubernetesmisconfig/rules/ensure_request_timeout_argument_is_appropriate)
* [Ensure Root CA File Argument Is Appropriate](kubernetesmisconfig/rules/ensure_root_ca_file_argument_appropriate)
* [Ensure Rotate Certificates Argument Is Enabled](kubernetesmisconfig/rules/ensure_rotate_certificates_argument_is_enabled)
* [Ensure Rotate Kubelet Server Certificate Argument Is Enabled](kubernetesmisconfig/rules/ensure_rotate_kubelet_server_certificate_argument_is_enabled)
* [Ensure Scheduler Configuration File Ownership Is Root](kubernetesmisconfig/rules/scheduler_conf_file_ownership_is_root)
* [Ensure Scheduler Configuration File Permissions Are Restrictive](kubernetesmisconfig/rules/scheduler_conf_file_permissions_are_restrictive)
* [Ensure Scheduler Pod Specification File Ownership Is Root](kubernetesmisconfig/rules/scheduler_pod_specification_file_ownership_root)
* [Ensure Scheduler Pod Specification File Permissions Are Restrictive](kubernetesmisconfig/rules/scheduler_pod_specification_file_permissions_are_restrictive)
* [Ensure Seccomp Profile Is docker Default Your Pod Definitions](kubernetesmisconfig/rules/ensure_seccomp_profile_is_docker_default_your_pod_definitions)
* [Ensure Secure Port Argument Is Not Set 0](kubernetesmisconfig/rules/ensure_secure_port_argument_is_not_0)
* [Ensure Service Account key File Argument Is Appropriate](kubernetesmisconfig/rules/ensure_service_account_key_file_argument_is_appropriate)
* [Ensure Service Account Lookup Argument Is Set True](kubernetesmisconfig/rules/ensure_service_account_lookup_argument_is_enabled)
* [Ensure Service Account Private Key File Argument Is Appropriate](kubernetesmisconfig/rules/ensure_service_account_private_key_file_argument_appropriate)
* [Ensure Service Account Tokens Are Only Mounted Where Necessary](kubernetesmisconfig/rules/ensure_service_account_tokens_mounted_where_necessary)
* [Ensure Service Account Tokens Are Only Mounted Where Necessary](kubernetesmisconfig/rules/kubernetes_service_account_tokens_mounted_only_where_necessary)
* [Ensure Streaming Connection Idle Timeout Argument Is Not Set 0](kubernetesmisconfig/rules/ensure_streaming_connection_idle_timeout_argument_is_not_set_0)
* [Ensure Terminated Pod GC Threshold Argument Appropriate](kubernetesmisconfig/rules/ensure_terminate_pod_gc_threshold_argument_appropriate)
* [Ensure That A Minimal Audit Policy Is Created](kubernetesmisconfig/rules/kubernetes_minimal_audit_policy)
* [Ensure That The Audit Policy Covers Key Security Concerns](kubernetesmisconfig/rules/kubernetes_audit_policy_covers_key_security_concerns)
* [Ensure The Cluster Has At Least One Active Policy Control Mechanism](kubernetesmisconfig/rules/kubernetes_cluster_has_active_policy_control_mechanism)
* [Ensure The Cluster-Admin Role Is Only Used Where Required](kubernetesmisconfig/rules/kubernetes_cluster_admin_role_used_only_where_required)
* [Ensure The CNI In Use Supports NetworkPolicies](kubernetesmisconfig/rules/kubernetes_cni_supports_network_policies)
* [Ensure The Seccomp Profile Is Set To docker/default In Pod Definitions](kubernetesmisconfig/rules/kubernetes_seccomp_profile_set_to_runtime_default)
* [Ensure Tls Cert File And Tls Private Key File Arguments Are Appropriate](kubernetesmisconfig/rules/ensure_tls_cert_file_and_private_key_file_arguments_are_appropriate)
* [Ensure Tls Cert File And Tls Private Key File Arguments Are Appropriate](kubernetesmisconfig/rules/ensure_tls_cert_file_tls_private_key_file_arguments_are_appropriate)
* [Ensure Token Auth File Parameter Is Not Set](kubernetesmisconfig/rules/ensure_token_auth_file_parameter_is_not_set)
* [Ensure Unique Certificate Authority Is Used For Etcd](kubernetesmisconfig/rules/ensure_unique_certificate_authority_is_used_etcd)
* [Ensure Use Service Account Credentials Argument Is Enabled](kubernetesmisconfig/rules/ensure_use_service_account_credentials_argument_is_enabled)
* [Etcd Data Directory Ownership Should Be etcd:etcd](kubernetesmisconfig/rules/kubernetes_etcd_data_dir_ownership)
* [Etcd Data Directory Permissions Should Be 700 Or More Restrictive](kubernetesmisconfig/rules/kubernetes_etcd_data_dir_permissions)
* [Etcd Pod Specification File Ownership Should Be root:root](kubernetesmisconfig/rules/kubernetes_etcd_pod_spec_file_ownership)
* [Etcd Pod Specification File Permissions Should Be 600 Or More Restrictive](kubernetesmisconfig/rules/kubernetes_etcd_pod_spec_file_permissions)
* [Every Non-System Namespace Should Have A Default-Deny NetworkPolicy](kubernetesmisconfig/rules/kubernetes_default_deny_networkpolicy)
* [If Proxy Kubeconfig File Exists Ensure Ownership Is Root](kubernetesmisconfig/rules/ensure_kubeconfig_ownership_is_root)
* [If Proxy Kubeconfig File Exists Ensure Permissions Are Restrictive](kubernetesmisconfig/rules/ensure_kubeconfig_permissions_are_restrictive)
* [Kube-Proxy Metrics Service Bound To Localhost](kubernetesmisconfig/rules/kubernetes_kube_proxy_metrics_bound_to_localhost)
* [Kubelet Anonymous Auth Argument Set To False](kubernetesmisconfig/rules/kubernetes_kubelet_anonymous_auth_disabled)
* [Kubelet Authorization Mode Not Set To AlwaysAllow](kubernetesmisconfig/rules/kubernetes_kubelet_authorization_mode_not_alwaysallow)
* [Kubelet Client CA File Argument Set As Appropriate](kubernetesmisconfig/rules/kubernetes_kubelet_client_ca_file_set)
* [Kubelet config.yaml File Ownership Set To root:root](kubernetesmisconfig/rules/kubernetes_kubelet_config_yaml_ownership_root)
* [Kubelet config.yaml File Permissions Set To 600 Or More Restrictive](kubernetesmisconfig/rules/kubernetes_kubelet_config_yaml_permissions_600)
* [Kubelet Event Record QPS Set To Ensure Appropriate Event Capture](kubernetesmisconfig/rules/kubernetes_kubelet_event_qps_appropriate)
* [Kubelet Hostname Override Argument Not Set](kubernetesmisconfig/rules/kubernetes_kubelet_hostname_override_not_set)
* [Kubelet Kubeconfig File Ownership Set To root:root](kubernetesmisconfig/rules/kubernetes_kubelet_kubeconfig_file_ownership_root)
* [Kubelet Kubeconfig File Permissions Set To 600 Or More Restrictive](kubernetesmisconfig/rules/kubernetes_kubelet_kubeconfig_file_permissions_600)
* [Kubelet Make Iptables Util Chains Argument Set To True](kubernetesmisconfig/rules/kubernetes_kubelet_make_iptables_util_chains_enabled)
* [Kubelet Only Makes Use Of Strong Cryptographic Ciphers](kubernetesmisconfig/rules/kubernetes_kubelet_strong_tls_cipher_suites)
* [Kubelet Pod PIDs Limit Is Set](kubernetesmisconfig/rules/kubernetes_kubelet_pod_pids_limit_set)
* [Kubelet Read Only Port Argument Set To 0](kubernetesmisconfig/rules/kubernetes_kubelet_read_only_port_disabled)
* [Kubelet Rotate Certificates Argument Not Set To False](kubernetesmisconfig/rules/kubernetes_kubelet_rotate_certificates_enabled)
* [Kubelet RotateKubeletServerCertificate Argument Set To True](kubernetesmisconfig/rules/kubernetes_kubelet_rotate_server_certificate_enabled)
* [Kubelet Seccomp Default Parameter Set To True](kubernetesmisconfig/rules/kubernetes_kubelet_seccomp_default_enabled)
* [Kubelet Service File Ownership Set To root:root](kubernetesmisconfig/rules/kubernetes_kubelet_service_file_ownership_root)
* [Kubelet Service File Permissions Set To 600 Or More Restrictive](kubernetesmisconfig/rules/kubernetes_kubelet_service_file_permissions_600)
* [Kubelet Streaming Connection Idle Timeout Not Set To 0](kubernetesmisconfig/rules/kubernetes_kubelet_streaming_connection_idle_timeout_set)
* [Kubelet TLS Cert File And Private Key File Arguments Set As Appropriate](kubernetesmisconfig/rules/kubernetes_kubelet_tls_cert_and_key_file_set)
* [Kubernetes PKI Certificate File Permissions Should Be 644 Or More Restrictive](kubernetesmisconfig/rules/kubernetes_pki_certificate_file_permissions)
* [Kubernetes PKI Directory And File Ownership Should Be root:root](kubernetesmisconfig/rules/kubernetes_pki_directory_ownership)
* [Kubernetes PKI Key File Permissions Should Be 600](kubernetesmisconfig/rules/kubernetes_pki_key_file_permissions)
* [Limit Use Of Bind Impersonate And Escalate Permissions Kubernetes Cluster](kubernetesmisconfig/rules/limit_bind_impersonate_escalate_permissions_kubernetes_cluster)
* [Limit Use Of The Bind, Impersonate And Escalate Permissions](kubernetesmisconfig/rules/kubernetes_limit_bind_impersonate_escalate_permissions)
* [Minimize Access To Create Persistent Volumes](kubernetesmisconfig/rules/kubernetes_minimize_access_to_create_persistent_volumes)
* [Minimize Access To Create Pods](kubernetesmisconfig/rules/kubernetes_minimize_access_to_create_pods)
* [Minimize Access To Create Pods](kubernetesmisconfig/rules/minimize_access_to_create_pods)
* [Minimize Access To Secrets](kubernetesmisconfig/rules/kubernetes_minimize_access_to_secrets)
* [Minimize Access To Secrets](kubernetesmisconfig/rules/minimize_access_to_secrets)
* [Minimize Access To Service Account Token Creation](kubernetesmisconfig/rules/kubernetes_minimize_access_to_service_account_token_creation)
* [Minimize Access To The Approval Sub-Resource Of CertificateSigningRequests](kubernetesmisconfig/rules/kubernetes_minimize_access_to_approval_subresource_of_csrs)
* [Minimize Access To The Proxy Sub-Resource Of Nodes](kubernetesmisconfig/rules/kubernetes_minimize_access_to_proxy_subresource_of_nodes)
* [Minimize Access To Webhook Configuration Objects](kubernetesmisconfig/rules/kubernetes_minimize_access_to_webhook_configuration_objects)
* [Minimize Admission Containers AllowPrivilegeEscalation](kubernetesmisconfig/rules/minimize_admission_containers_allowprivilegeescalation)
* [Minimize Admission Containers Wishing Host IPC Namespace](kubernetesmisconfig/rules/minimize_admission_containers_wishing_host_ipc_namespace)
* [Minimize Admission Containers Wishing Host Network Namespace](kubernetesmisconfig/rules/minimize_admission_containers_wishing_host_network_namespace)
* [Minimize Admission Containers Wishing Host Process ID Namespace](kubernetesmisconfig/rules/minimize_admission_containers_wishing_host_process_id_namespace)
* [Minimize Admission Of Containers Added Capabilities](kubernetesmisconfig/rules/minimize_admission_containers_added_capabilities)
* [Minimize Admission Of Containers Capabilities Assigned](kubernetesmisconfig/rules/minimize_admission_containers_capabilities_assigned)
* [Minimize Admission Of Containers HostPorts](kubernetesmisconfig/rules/minimize_admission_containers_hostports)
* [Minimize Admission Of Containers With NET\_RAW Capability](kubernetesmisconfig/rules/minimize_admission_containers_net_raw_capability)
* [Minimize Admission Of HostPath Volumes](kubernetesmisconfig/rules/minimize_admission_hostpath_volumes)
* [Minimize Admission Of Privileged Containers](kubernetesmisconfig/rules/minimize_admission_privileged_containers)
* [Minimize Admission Of Root Containers](kubernetesmisconfig/rules/minimize_admission_root_containers)
* [Minimize Admission Of Windows HostProcess Containers](kubernetesmisconfig/rules/minimize_admission_windows_hostprocess_containers)
* [Minimize The Admission Of Containers Sharing The Host IPC Namespace](kubernetesmisconfig/rules/kubernetes_minimize_admission_of_host_ipc_namespace_containers)
* [Minimize The Admission Of Containers Sharing The Host Network Namespace](kubernetesmisconfig/rules/kubernetes_minimize_admission_of_host_network_namespace_containers)
* [Minimize The Admission Of Containers Sharing The Host Process ID Namespace](kubernetesmisconfig/rules/kubernetes_minimize_admission_of_host_pid_namespace_containers)
* [Minimize The Admission Of Containers Which Use HostPorts](kubernetesmisconfig/rules/kubernetes_minimize_admission_of_hostport_containers)
* [Minimize The Admission Of Containers With allowPrivilegeEscalation](kubernetesmisconfig/rules/kubernetes_minimize_admission_of_allow_privilege_escalation_containers)
* [Minimize The Admission Of Containers With Capabilities Assigned](kubernetesmisconfig/rules/kubernetes_minimize_admission_of_containers_with_capabilities_assigned)
* [Minimize The Admission Of Containers With The NET\_RAW Capability](kubernetesmisconfig/rules/kubernetes_minimize_admission_of_net_raw_capability_containers)
* [Minimize The Admission Of HostPath Volumes](kubernetesmisconfig/rules/kubernetes_minimize_admission_of_hostpath_volumes)
* [Minimize The Admission Of Privileged Containers](kubernetesmisconfig/rules/kubernetes_minimize_admission_of_privileged_containers)
* [Minimize The Admission Of Root Containers](kubernetesmisconfig/rules/kubernetes_minimize_admission_of_root_containers)
* [Minimize The Admission Of Windows HostProcess Containers](kubernetesmisconfig/rules/kubernetes_minimize_admission_of_windows_hostprocess_containers)
* [Minimize Wildcard Use In Roles And ClusterRoles](kubernetesmisconfig/rules/kubernetes_minimize_wildcard_use_in_roles_and_clusterroles)
* [Minimize Wildcard Use Roles And ClusterRoles](kubernetesmisconfig/rules/minimize_wildcard_use_in_roles_and_clusterroles)
* [Multi-Replica Deployments Should Have A PodDisruptionBudget](kubernetesmisconfig/rules/kubernetes_multireplica_poddisruptionbudget)
* [Mutable Image Tags Should Use imagePullPolicy Always](kubernetesmisconfig/rules/kubernetes_mutable_tag_pullpolicy_always)
* [Namespaces Should Enforce Pod Security Admission Baseline Or Stricter](kubernetesmisconfig/rules/kubernetes_enforce_pod_security_admission)
* [No RoleBinding Should Grant Access To Anonymous Or Unauthenticated Users](kubernetesmisconfig/rules/kubernetes_no_anonymous_rolebindings)
* [No ServiceAccount Should Be Bound To cluster-admin](kubernetesmisconfig/rules/kubernetes_no_serviceaccount_cluster_admin)
* [No Workloads Should Run In The default Namespace](kubernetesmisconfig/rules/kubernetes_no_workloads_default_namespace)
* [Pods Should Be Managed By A Controller](kubernetesmisconfig/rules/kubernetes_pods_managed_by_controller)
* [Pods Should Not Mount HostPath Volumes](kubernetesmisconfig/rules/kubernetes_no_hostpath_volumes)
* [Pods Should Not Share Host Namespaces](kubernetesmisconfig/rules/kubernetes_no_host_namespace_sharing)
* [Pods That Do Not Use The API Should Disable Token Automount](kubernetesmisconfig/rules/kubernetes_disable_token_automount)
* [pods/exec Should Not Be Granted To Broad Subjects](kubernetesmisconfig/rules/kubernetes_restrict_pods_exec)
* [Prefer Bound Projected ServiceAccount Tokens Over Secret Tokens](kubernetesmisconfig/rules/kubernetes_prefer_projected_sa_tokens)
* [Prefer Secrets Files Over Secrets Environment Variables](kubernetesmisconfig/rules/prefer_secrets_files_over_secrets_environment_variables)
* [Prefer Using Secrets As Files Over Secrets As Environment Variables](kubernetesmisconfig/rules/kubernetes_prefer_secrets_as_files_over_environment_variables)
* [Proxy Kubeconfig File Ownership Set To root:root](kubernetesmisconfig/rules/kubernetes_proxy_kubeconfig_file_ownership_root)
* [Proxy Kubeconfig File Permissions Set To 600 Or More Restrictive](kubernetesmisconfig/rules/kubernetes_proxy_kubeconfig_file_permissions_600)
* [Scheduler Bind Address Should Be 127.0.0.1](kubernetesmisconfig/rules/kubernetes_scheduler_bind_address)
* [Scheduler Kubeconfig File Ownership Should Be root:root](kubernetesmisconfig/rules/kubernetes_scheduler_kubeconfig_file_ownership)
* [Scheduler Kubeconfig File Permissions Should Be 600 Or More Restrictive](kubernetesmisconfig/rules/kubernetes_scheduler_kubeconfig_file_permissions)
* [Scheduler Pod Specification File Ownership Should Be root:root](kubernetesmisconfig/rules/kubernetes_scheduler_pod_spec_file_ownership)
* [Scheduler Pod Specification File Permissions Should Be 600 Or More Restrictive](kubernetesmisconfig/rules/kubernetes_scheduler_pod_spec_file_permissions)
* [Scheduler Should Disable Profiling](kubernetesmisconfig/rules/kubernetes_scheduler_profiling_disabled)
* [Secrets Should Be Encrypted At Rest](kubernetesmisconfig/rules/kubernetes_secrets_encrypted_at_rest)
* [Sensitive Values Should Not Be Passed As Literal Env Vars](kubernetesmisconfig/rules/kubernetes_no_literal_secret_env)
* [Service Account Token Authentication Should Not Be Used For Users](kubernetesmisconfig/rules/kubernetes_service_account_token_authentication_for_users)
* [Tenant Namespaces Should Have A ResourceQuota](kubernetesmisconfig/rules/kubernetes_namespace_resourcequota)
* [The Default Namespace Should Not Be Used](kubernetesmisconfig/rules/kubernetes_default_namespace_should_not_be_used)
* [The Default Namespace Should Not Used](kubernetesmisconfig/rules/default_namespace_should_not_used)
* [Verify Read Only Port Argument Is Set 0](kubernetesmisconfig/rules/check_read_only_port_argument_is_0)
* [Verify RotateKubeletServerCertificate Argument Is Enabled](kubernetesmisconfig/rules/check_rotatekubeletservercertificate_argument_is_enabled)