> ## Documentation Index
> Fetch the complete documentation index at: https://cloudanix.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Kubernetes Misconfig for OCI

### Checks Performed

* [Access Control And Container Engine For Kubernetes](ocikubernetesmisconfig/rules/oci_access_control_and_container_engine_kubernetes)
* [Access Control And Container Engine For Kubernetes](ocikubernetesmisconfig/rules/oci_access_control_container_engine_for_kubernetes)
* [Apply Security Context To Your Pods And Containers](ocikubernetesmisconfig/rules/oci_apply_security_context_your_pods_and_containers)
* [Apply Security Context To Your Pods And Containers](ocikubernetesmisconfig/rules/oci_general_apply_security_context)
* [Client Certificate Authentication Should Not Be Used For Users](ocikubernetesmisconfig/rules/oci_client_cert_auth_not_used_for_users)
* [Client Certificate Authentication Should Not Be Used For Users](ocikubernetesmisconfig/rules/oci_client_certificate_authentication_should_not_used_users)
* [Consider External Secret Storage](ocikubernetesmisconfig/rules/oci_consider_external_secret_storage)
* [Consider External Secret Storage](ocikubernetesmisconfig/rules/oci_secrets_external_storage)
* [Create Administrative Boundaries Between Resources Using Namespaces](ocikubernetesmisconfig/rules/oci_create_administrative_boundaries_between_resources_using_namespaces)
* [Create Administrative Boundaries Between Resources Using Namespaces](ocikubernetesmisconfig/rules/oci_general_namespace_administrative_boundaries)
* [Encrypt Traffic Https Load Balancers With Tls Certificates](ocikubernetesmisconfig/rules/oci_encrypt_traffic_https_load_balancers_with_tls_certificates)
* [Encrypt Traffic To HTTPS Load Balancers With TLS Certificates](ocikubernetesmisconfig/rules/oci_encrypt_traffic_to_https_load_balancers_tls)
* [Encrypting Kubernetes Secrets At Rest In Etcd](ocikubernetesmisconfig/rules/oci_encrypt_kubernetes_secrets_at_rest_etcd)
* [Encrypting Kubernetes Secrets At Rest In Etcd](ocikubernetesmisconfig/rules/oci_encrypting_kubernetes_secrets_at_rest_in_etcd)
* [Ensure Access To OCI Audit Service Log For OKE](ocikubernetesmisconfig/rules/oci_ensure_access_oci_audit_service_log_for_oke)
* [Ensure Access To OCI Audit Service Log For OKE](ocikubernetesmisconfig/rules/oci_oci_audit_log_access_for_oke)
* [Ensure All Namespaces Have Network Policies Defined](ocikubernetesmisconfig/rules/oci_netpol_all_namespaces_have_policies)
* [Ensure Anonymous Auth Argument Is Disabled](ocikubernetesmisconfig/rules/oci_ensure_anonymous_auth_argument_set_disabled)
* [Ensure Authorization Mode Argument Is Not Set Always Allow](ocikubernetesmisconfig/rules/oci_ensure_authorization_mode_argument_is_not_always_allow)
* [Ensure Client Ca File Argument Is Set Appropriate](ocikubernetesmisconfig/rules/oci_ensure_client_ca_file_argument_is_set_as_appropriate)
* [Ensure Cluster Admin Role Is Only Used Where Required](ocikubernetesmisconfig/rules/oci_ensure_cluster_admin_role_only_used_where_required)
* [Ensure Clusters Are Created With Private Endpoint Enabled And Public Access Disabled](ocikubernetesmisconfig/rules/oci_cluster_private_endpoint_public_access_disabled)
* [Ensure Clusters Are Created With Private Endpoint Enabled And Public Access Disabled](ocikubernetesmisconfig/rules/oci_ensure_clusters_private_endpoint_enabled_and_public_access_disabled)
* [Ensure Clusters Are Created With Private Nodes](ocikubernetesmisconfig/rules/oci_cluster_private_nodes)
* [Ensure Clusters Are Created With Private Nodes](ocikubernetesmisconfig/rules/oci_ensure_clusters_are_created_private_nodes)
* [Ensure Default Service Accounts Are Not Actively Used](ocikubernetesmisconfig/rules/oci_ensure_default_service_accounts_are_not_actively_used)
* [Ensure Default Service Accounts Are Not Actively Used](ocikubernetesmisconfig/rules/oci_rbac_default_service_accounts_not_used)
* [Ensure Event Qps Argument Is Set To 0 Or A Level Which Ensures Appropriate Event Capture](ocikubernetesmisconfig/rules/oci_ensure_event_qps_argument_set_0_level_which_ensures_appropriate_event_capture)
* [Ensure Kubelet Configuration File Has Permissions Set Restrictive](ocikubernetesmisconfig/rules/oci_ensure_kubelet_configuration_file_has_permissions_restrictive)
* [Ensure Kubelet Configuration File Ownership Is Set Root](ocikubernetesmisconfig/rules/oci_ensure_kubelet_configuration_file_ownership_set_root)
* [Ensure Kubelet Kubeconfig File Ownership Is Set Root](ocikubernetesmisconfig/rules/oci_ensure_kubelet_kubeconfig_file_ownership_set_root)
* [Ensure Kubelet Kubeconfig File Permissions Are Set Restrictive](ocikubernetesmisconfig/rules/oci_ensure_kubelet_kubeconfig_file_permissions_are_restrictive)
* [Ensure Latest Cni Version Is Used](ocikubernetesmisconfig/rules/oci_ensure_latest_cni_version_is_used)
* [Ensure Latest CNI Version Is Used](ocikubernetesmisconfig/rules/oci_netpol_latest_cni_version)
* [Ensure Make Iptables Util Chains Argument Is Enabled](ocikubernetesmisconfig/rules/oci_ensure_make_iptables_util_chains_argument_is_enabled)
* [Ensure Network Policy Is Enabled And Set Appropriate](ocikubernetesmisconfig/rules/oci_ensure_network_policy_is_enabled_appropriate)
* [Ensure Network Policy Is Enabled And Set As Appropriate](ocikubernetesmisconfig/rules/oci_network_policy_enabled)
* [Ensure Read Only Port Argument Is Set To 0](ocikubernetesmisconfig/rules/oci_ensure_read_only_port_argument_is_set_0)
* [Ensure Rotate Certificates Argument Is Not Set Disabled](ocikubernetesmisconfig/rules/oci_ensure_rotate_certificates_argument_is_not_disabled)
* [Ensure Rotate Server Certificates Argument Is Enabled](ocikubernetesmisconfig/rules/oci_ensure_rotate_server_certificates_argument_is_enabled)
* [Ensure Service Account Tokens Are Only Mounted Where Necessary](ocikubernetesmisconfig/rules/oci_ensure_service_account_tokens_only_mounted_where_necessary)
* [Ensure Service Account Tokens Are Only Mounted Where Necessary](ocikubernetesmisconfig/rules/oci_rbac_service_account_token_mount)
* [Ensure Streaming Connection Idle Timeout Argument Is Not Set 0](ocikubernetesmisconfig/rules/oci_ensure_streaming_connection_idle_timeout_argument_not_set_to_0)
* [Ensure That All Namespaces Have Network Policies Defined](ocikubernetesmisconfig/rules/oci_ensure_all_namespaces_have_network_policies_defined)
* [Ensure Tls Cert File And Tls Private Key File Arguments Are Set Appropriate](ocikubernetesmisconfig/rules/oci_ensure_tls_cert_file_tls_private_key_file_arguments_are_set_appropriate)
* [Kubelet Anonymous Auth Argument Set To False](ocikubernetesmisconfig/rules/oci_kubelet_anonymous_auth_disabled)
* [Kubelet Authorization Mode Not Set To AlwaysAllow](ocikubernetesmisconfig/rules/oci_kubelet_authorization_mode_not_alwaysallow)
* [Kubelet Client CA File Argument Set As Appropriate](ocikubernetesmisconfig/rules/oci_kubelet_client_ca_file_set)
* [Kubelet Configuration File Ownership Set To root:root](ocikubernetesmisconfig/rules/oci_kubelet_config_file_ownership_root)
* [Kubelet Configuration File Permissions Set To 644 Or More Restrictive](ocikubernetesmisconfig/rules/oci_kubelet_config_file_permissions_644)
* [Kubelet Event QPS Argument Set For Appropriate Event Capture](ocikubernetesmisconfig/rules/oci_kubelet_event_qps_appropriate)
* [Kubelet Kubeconfig File Ownership Set To root:root](ocikubernetesmisconfig/rules/oci_kubelet_kubeconfig_file_ownership_root)
* [Kubelet Kubeconfig File Permissions Set To 644 Or More Restrictive](ocikubernetesmisconfig/rules/oci_kubelet_kubeconfig_file_permissions_644)
* [Kubelet Make Iptables Util Chains Argument Set To True](ocikubernetesmisconfig/rules/oci_kubelet_make_iptables_util_chains_enabled)
* [Kubelet Read Only Port Argument Set To 0](ocikubernetesmisconfig/rules/oci_kubelet_read_only_port_disabled)
* [Kubelet Rotate Certificates Argument Not Set To False](ocikubernetesmisconfig/rules/oci_kubelet_rotate_certificates_not_false)
* [Kubelet Rotate Server Certificates Argument Set To True](ocikubernetesmisconfig/rules/oci_kubelet_rotate_server_certificates_enabled)
* [Kubelet Streaming Connection Idle Timeout Not Set To 0](ocikubernetesmisconfig/rules/oci_kubelet_streaming_connection_idle_timeout_nonzero)
* [Kubelet TLS Cert File And TLS Private Key File Arguments Set As Appropriate](ocikubernetesmisconfig/rules/oci_kubelet_tls_cert_and_private_key_files_set)
* [Minimize Access Create Pods](ocikubernetesmisconfig/rules/oci_minimize_access_create_pods)
* [Minimize Access To Create Pods](ocikubernetesmisconfig/rules/oci_rbac_minimize_create_pods_access)
* [Minimize Access To Secrets](ocikubernetesmisconfig/rules/oci_minimize_access_secrets)
* [Minimize Access To Secrets](ocikubernetesmisconfig/rules/oci_rbac_minimize_secrets_access)
* [Minimize Admission Of Containers Sharing The Host IPC Namespace](ocikubernetesmisconfig/rules/oci_pod_minimize_host_ipc)
* [Minimize Admission Of Containers Sharing The Host Network Namespace](ocikubernetesmisconfig/rules/oci_pod_minimize_host_network)
* [Minimize Admission Of Containers Sharing The Host Process ID Namespace](ocikubernetesmisconfig/rules/oci_pod_minimize_host_pid)
* [Minimize Admission Of Containers With allowPrivilegeEscalation](ocikubernetesmisconfig/rules/oci_pod_minimize_allow_privilege_escalation)
* [Minimize Cluster Access To Read Only](ocikubernetesmisconfig/rules/oci_minimize_cluster_access_read_only)
* [Minimize Cluster Access To Read-Only](ocikubernetesmisconfig/rules/oci_minimize_cluster_access_to_read_only)
* [Minimize Container Registries To Only Those Approved](ocikubernetesmisconfig/rules/oci_minimize_container_registries_only_those_approved)
* [Minimize Container Registries To Only Those Approved](ocikubernetesmisconfig/rules/oci_minimize_container_registries_to_approved)
* [Minimize The Admission Of Containers Wishing To Share The Host Ipc Namespace](ocikubernetesmisconfig/rules/oci_minimize_admission_containers_wishing_share_host_ipc_namespace)
* [Minimize The Admission Of Containers Wishing To Share The Host Network Namespace](ocikubernetesmisconfig/rules/oci_minimize_admission_containers_wishing_share_host_network_namespace)
* [Minimize The Admission Of Containers Wishing To Share The Host Process Id Namespace](ocikubernetesmisconfig/rules/oci_minimize_admission_containers_wishing_share_host_process_id_namespace)
* [Minimize The Admission Of Containers With Allow Privilege Escalation](ocikubernetesmisconfig/rules/oci_minimize_admission_containers_with_allow_privilege_escalation)
* [Minimize The Admission Of Privileged Containers](ocikubernetesmisconfig/rules/oci_minimize_admission_privileged_containers)
* [Minimize The Admission Of Privileged Containers](ocikubernetesmisconfig/rules/oci_pod_minimize_privileged_containers)
* [Minimize User Access Control To Container Engine For Kubernetes](ocikubernetesmisconfig/rules/oci_minimize_user_access_container_engine_kubernetes)
* [Minimize User Access Control To Container Engine For Kubernetes](ocikubernetesmisconfig/rules/oci_minimize_user_access_control_to_oke)
* [Minimize Wildcard Use In Roles And Cluster Roles](ocikubernetesmisconfig/rules/oci_minimize_wildcard_use_roles_cluster_roles)
* [Minimize Wildcard Use In Roles And ClusterRoles](ocikubernetesmisconfig/rules/oci_rbac_minimize_wildcard_roles)
* [Oracle Cloud Security Penetration and Vulnerability Testing](ocikubernetesmisconfig/rules/oci_oci_security_penetration_vulnerability_testing)
* [Oracle Cloud Security Penetration And Vulnerability Testing](ocikubernetesmisconfig/rules/oci_oracle_cloud_security_penetration_and_vulnerability_testing)
* [Prefer Using Dedicated Service Accounts](ocikubernetesmisconfig/rules/oci_prefer_dedicated_service_accounts)
* [Prefer Using Dedicated Service Accounts](ocikubernetesmisconfig/rules/oci_prefer_using_dedicated_service_accounts)
* [Prefer Using Secrets As Files Over Secrets As Environment Variables](ocikubernetesmisconfig/rules/oci_secrets_prefer_files_over_env)
* [Prefer Using Secrets Files Over Secrets Environment Variables](ocikubernetesmisconfig/rules/oci_prefer_using_secrets_files_over_secrets_environment_variables)
* [Restrict Access To The Control Plane Endpoint](ocikubernetesmisconfig/rules/oci_restrict_access_to_control_plane_endpoint)
* [Restrict Use Of Cluster-Admin Role](ocikubernetesmisconfig/rules/oci_rbac_cluster_admin_role_least_privilege)
* [The Default Namespace Should Not Be Used](ocikubernetesmisconfig/rules/oci_default_namespace_should_not_be_used)
* [The Default Namespace Should Not Be Used](ocikubernetesmisconfig/rules/oci_general_default_namespace_not_used)