CKS Web TestEngine demo

Simulation

Context

You must resolve issues that a CIS Benchmark tool found for the kubeadm provisioned cluster.

Task

Fix all issues via configuration and restart the affected components to ensure the new settings take effect.

Fix all of the following violations that were found against the kubelet:

The cluster uses the Docker Engine as its container runtime. If needed, use the docker command to troubleshoot running containers.

• Ensure that the anonymous-auth argument is set to false - FAIL
• Ensure that the authorization-mode argument is not set to AlwaysAllow - FAIL
• Use Webhook authentication/authorization where possible.

Fix all of the following violations that were found against etcd:

• Ensure that the client-cert-auth argument is set to true - FAIL