> ## Documentation Index
> Fetch the complete documentation index at: https://cloudanix.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# OCI Kubernetes Engine (OKE) Monitoring

### Checks Performed

* [OCI OKE Ability to Create Pods Should Be Restricted](ociokemonitoring/rules/oci_oke_restrict_pod_creation)
* [OCI OKE Access to Kubernetes Control Plane Should Be Restricted](ociokemonitoring/rules/oci_oke_restrict_control_plane_access)
* [OCI OKE Access to Secrets Should Be Restricted](ociokemonitoring/rules/oci_oke_restrict_access_to_secrets)
* [OCI OKE Anonymous Requests to Kubelet Server Should Be Disabled](ociokemonitoring/rules/oci_oke_disable_anonymous_kubelet)
* [OCI OKE cluster-admin Role Usage Should Be Restricted](ociokemonitoring/rules/oci_oke_restrict_cluster_admin_role)
* [OCI OKE Clusters Should Have Network Policy Support Enabled](ociokemonitoring/rules/oci_oke_network_policy_support)
* [OCI OKE CNI Plugin Should Support Network Policies](ociokemonitoring/rules/oci_oke_cni_plugin_version)
* [OCI OKE Kubelet Authorization Mode Should Not Be AlwaysAllow](ociokemonitoring/rules/oci_oke_explicit_authorization)
* [OCI OKE Kubelet Client Certificates Should Be Auto-Rotated](ociokemonitoring/rules/oci_oke_kubelet_client_cert_rotation)
* [OCI OKE Kubelet Configuration File Ownership Should Be root:root](ociokemonitoring/rules/oci_oke_kubelet_config_file_ownership)
* [OCI OKE Kubelet Configuration File Permissions Should Be 644](ociokemonitoring/rules/oci_oke_kubelet_config_file_permissions)
* [OCI OKE Kubelet Read-Only Port Should Be Disabled](ociokemonitoring/rules/oci_oke_disable_kubelet_read_only_port)
* [OCI OKE Kubelet Server Certificates Should Be Auto-Rotated](ociokemonitoring/rules/oci_oke_kubelet_server_cert_rotation)
* [OCI OKE Kubelet Servers Should Serve Only HTTPS Traffic](ociokemonitoring/rules/oci_oke_kubelet_https_enabled)
* [OCI OKE Kubelet Should Authenticate Using SSL/TLS Certificates](ociokemonitoring/rules/oci_oke_ssl_tls_authentication)
* [OCI OKE Kubelet Should Be Allowed to Manage IPtables](ociokemonitoring/rules/oci_oke_kubelet_manage_iptables)
* [OCI OKE Kubelet streamingConnectionIdleTimeout Should Not Be 0](ociokemonitoring/rules/oci_oke_streaming_connection_idle_timeout)
* [OCI OKE kubelet-config.json File Ownership Should Be root:root](ociokemonitoring/rules/oci_oke_kubelet_config_json_ownership)
* [OCI OKE kubelet-config.json File Permissions Should Be 644](ociokemonitoring/rules/oci_oke_kubelet_config_json_permissions)
* [OCI OKE Kubernetes API Public Endpoint Should Be Disabled](ociokemonitoring/rules/oci_oke_disable_public_endpoint)
* [OCI OKE Node Pools Should Use Private Nodes](ociokemonitoring/rules/oci_oke_use_private_nodes)
* [OCI OKE Roles and ClusterRoles Should Avoid Wildcard Use](ociokemonitoring/rules/oci_oke_avoid_wildcard_roles)
* [OCI OKE Service Account Token Mounting Should Be Restricted](ociokemonitoring/rules/oci_oke_restrict_service_account_token_mounting)
* [OCI OKE Should Capture Security-Relevant Events Without Restriction](ociokemonitoring/rules/oci_oke_security_event_capture)
* [OCI OKE Should Limit Default Service Account Usage](ociokemonitoring/rules/oci_oke_limit_default_service_account)
* [OCI OKE Should Minimize Admission of Privileged Containers](ociokemonitoring/rules/oci_oke_privileged_containers)
* [OCI OKE Should Minimize Containers Sharing the Host IPC Namespace](ociokemonitoring/rules/oci_oke_host_ipc_namespace)
* [OCI OKE Should Minimize Containers Sharing the Host Network Namespace](ociokemonitoring/rules/oci_oke_host_network_namespace)
* [OCI OKE Should Minimize Containers Sharing the Host PID Namespace](ociokemonitoring/rules/oci_oke_host_pid_namespace)
* [OCI OKE Should Mount Secrets as Files Instead of Environment Variables](ociokemonitoring/rules/oci_oke_secrets_as_files)
* [OCI OKE Should Prevent Container Privilege Escalation](ociokemonitoring/rules/oci_oke_prevent_privilege_escalation)
* [OCI OKE Should Use Dedicated Service Accounts](ociokemonitoring/rules/oci_oke_dedicated_service_accounts)
* [OCI OKE Should Use Network Policies to Control Traffic](ociokemonitoring/rules/oci_oke_use_network_policies)
* [OCI OKE Should Use Non-Default Namespaces](ociokemonitoring/rules/oci_oke_use_non_default_namespaces)
