> ## Documentation Index
> Fetch the complete documentation index at: https://cloudanix.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Kubernetes Misconfig for OCI

### Checks Performed

* [Access Control And Container Engine For Kubernetes](ocikubernetesmisconfig/rules/oci_access_control_container_engine_for_kubernetes)
* [An Admission Policy Engine Should Enforce Workload Policy](ocikubernetesmisconfig/rules/oci_admission_policy_engine_enforced)
* [Apply Security Context To Your Pods And Containers](ocikubernetesmisconfig/rules/oci_general_apply_security_context)
* [Audit Logging Should Be Enabled And Shipped Off-Cluster](ocikubernetesmisconfig/rules/oci_audit_logging_shipped_offcluster)
* [Client Certificate Authentication Should Not Be Used For Users](ocikubernetesmisconfig/rules/oci_client_cert_auth_not_used_for_users)
* [Consider External Secret Storage](ocikubernetesmisconfig/rules/oci_secrets_external_storage)
* [Container Images Should Not Use The latest Or Untagged Tag](ocikubernetesmisconfig/rules/oci_no_latest_image_tag)
* [Containers Should Define Liveness And Readiness Probes](ocikubernetesmisconfig/rules/oci_define_liveness_readiness_probes)
* [Containers Should Disallow Privilege Escalation](ocikubernetesmisconfig/rules/oci_disallow_privilege_escalation)
* [Containers Should Drop All Linux Capabilities](ocikubernetesmisconfig/rules/oci_drop_all_capabilities)
* [Containers Should Not Run In Privileged Mode](ocikubernetesmisconfig/rules/oci_no_privileged_container)
* [Containers Should Run As Non-Root](ocikubernetesmisconfig/rules/oci_container_run_as_nonroot)
* [Containers Should Set CPU And Memory Limits](ocikubernetesmisconfig/rules/oci_set_resource_limits)
* [Containers Should Set CPU And Memory Requests](ocikubernetesmisconfig/rules/oci_set_resource_requests)
* [Containers Should Use A Read-Only Root Filesystem](ocikubernetesmisconfig/rules/oci_readonly_root_filesystem)
* [Create Administrative Boundaries Between Resources Using Namespaces](ocikubernetesmisconfig/rules/oci_general_namespace_administrative_boundaries)
* [Encrypt Traffic To HTTPS Load Balancers With TLS Certificates](ocikubernetesmisconfig/rules/oci_encrypt_traffic_to_https_load_balancers_tls)
* [Encrypting Kubernetes Secrets At Rest In Etcd](ocikubernetesmisconfig/rules/oci_encrypt_kubernetes_secrets_at_rest_etcd)
* [Ensure Access To OCI Audit Service Log For OKE](ocikubernetesmisconfig/rules/oci_oci_audit_log_access_for_oke)
* [Ensure All Namespaces Have Network Policies Defined](ocikubernetesmisconfig/rules/oci_netpol_all_namespaces_have_policies)
* [Ensure Clusters Are Created With Private Endpoint Enabled And Public Access Disabled](ocikubernetesmisconfig/rules/oci_cluster_private_endpoint_public_access_disabled)
* [Ensure Clusters Are Created With Private Nodes](ocikubernetesmisconfig/rules/oci_cluster_private_nodes)
* [Ensure Default Service Accounts Are Not Actively Used](ocikubernetesmisconfig/rules/oci_rbac_default_service_accounts_not_used)
* [Ensure Kubelet Kubeconfig File Ownership Is Set Root](ocikubernetesmisconfig/rules/oci_ensure_kubelet_kubeconfig_file_ownership_set_root)
* [Ensure Latest CNI Version Is Used](ocikubernetesmisconfig/rules/oci_netpol_latest_cni_version)
* [Ensure Network Policy Is Enabled And Set As Appropriate](ocikubernetesmisconfig/rules/oci_network_policy_enabled)
* [Ensure Service Account Tokens Are Only Mounted Where Necessary](ocikubernetesmisconfig/rules/oci_rbac_service_account_token_mount)
* [Every Non-System Namespace Should Have A Default-Deny NetworkPolicy](ocikubernetesmisconfig/rules/oci_default_deny_networkpolicy)
* [Kubelet Anonymous Auth Argument Set To False](ocikubernetesmisconfig/rules/oci_kubelet_anonymous_auth_disabled)
* [Kubelet Authorization Mode Not Set To AlwaysAllow](ocikubernetesmisconfig/rules/oci_kubelet_authorization_mode_not_alwaysallow)
* [Kubelet Client CA File Argument Set As Appropriate](ocikubernetesmisconfig/rules/oci_kubelet_client_ca_file_set)
* [Kubelet Configuration File Ownership Set To root:root](ocikubernetesmisconfig/rules/oci_kubelet_config_file_ownership_root)
* [Kubelet Configuration File Permissions Set To 644 Or More Restrictive](ocikubernetesmisconfig/rules/oci_kubelet_config_file_permissions_644)
* [Kubelet Event QPS Argument Set For Appropriate Event Capture](ocikubernetesmisconfig/rules/oci_kubelet_event_qps_appropriate)
* [Kubelet Kubeconfig File Ownership Set To root:root](ocikubernetesmisconfig/rules/oci_kubelet_kubeconfig_file_ownership_root)
* [Kubelet Kubeconfig File Permissions Set To 644 Or More Restrictive](ocikubernetesmisconfig/rules/oci_kubelet_kubeconfig_file_permissions_644)
* [Kubelet Make Iptables Util Chains Argument Set To True](ocikubernetesmisconfig/rules/oci_kubelet_make_iptables_util_chains_enabled)
* [Kubelet Read Only Port Argument Set To 0](ocikubernetesmisconfig/rules/oci_kubelet_read_only_port_disabled)
* [Kubelet Rotate Certificates Argument Not Set To False](ocikubernetesmisconfig/rules/oci_kubelet_rotate_certificates_not_false)
* [Kubelet Rotate Server Certificates Argument Set To True](ocikubernetesmisconfig/rules/oci_kubelet_rotate_server_certificates_enabled)
* [Kubelet Streaming Connection Idle Timeout Not Set To 0](ocikubernetesmisconfig/rules/oci_kubelet_streaming_connection_idle_timeout_nonzero)
* [Kubelet TLS Cert File And TLS Private Key File Arguments Set As Appropriate](ocikubernetesmisconfig/rules/oci_kubelet_tls_cert_and_private_key_files_set)
* [Minimize Access To Create Pods](ocikubernetesmisconfig/rules/oci_rbac_minimize_create_pods_access)
* [Minimize Access To Secrets](ocikubernetesmisconfig/rules/oci_rbac_minimize_secrets_access)
* [Minimize Admission Of Containers Sharing The Host IPC Namespace](ocikubernetesmisconfig/rules/oci_pod_minimize_host_ipc)
* [Minimize Admission Of Containers Sharing The Host Network Namespace](ocikubernetesmisconfig/rules/oci_pod_minimize_host_network)
* [Minimize Admission Of Containers Sharing The Host Process ID Namespace](ocikubernetesmisconfig/rules/oci_pod_minimize_host_pid)
* [Minimize Admission Of Containers With allowPrivilegeEscalation](ocikubernetesmisconfig/rules/oci_pod_minimize_allow_privilege_escalation)
* [Minimize Cluster Access To Read-Only](ocikubernetesmisconfig/rules/oci_minimize_cluster_access_to_read_only)
* [Minimize Container Registries To Only Those Approved](ocikubernetesmisconfig/rules/oci_minimize_container_registries_to_approved)
* [Minimize The Admission Of Privileged Containers](ocikubernetesmisconfig/rules/oci_pod_minimize_privileged_containers)
* [Minimize User Access Control To Container Engine For Kubernetes](ocikubernetesmisconfig/rules/oci_minimize_user_access_control_to_oke)
* [Minimize Wildcard Use In Roles And ClusterRoles](ocikubernetesmisconfig/rules/oci_rbac_minimize_wildcard_roles)
* [Multi-Replica Deployments Should Have A PodDisruptionBudget](ocikubernetesmisconfig/rules/oci_multireplica_poddisruptionbudget)
* [Mutable Image Tags Should Use imagePullPolicy Always](ocikubernetesmisconfig/rules/oci_mutable_tag_pullpolicy_always)
* [Namespaces Should Enforce Pod Security Admission Baseline Or Stricter](ocikubernetesmisconfig/rules/oci_enforce_pod_security_admission)
* [No RoleBinding Should Grant Access To Anonymous Or Unauthenticated Users](ocikubernetesmisconfig/rules/oci_no_anonymous_rolebindings)
* [No ServiceAccount Should Be Bound To cluster-admin](ocikubernetesmisconfig/rules/oci_no_serviceaccount_cluster_admin)
* [No Workloads Should Run In The default Namespace](ocikubernetesmisconfig/rules/oci_no_workloads_default_namespace)
* [Oracle Cloud Security Penetration and Vulnerability Testing](ocikubernetesmisconfig/rules/oci_oci_security_penetration_vulnerability_testing)
* [Pods Should Be Managed By A Controller](ocikubernetesmisconfig/rules/oci_pods_managed_by_controller)
* [Pods Should Not Mount HostPath Volumes](ocikubernetesmisconfig/rules/oci_no_hostpath_volumes)
* [Pods Should Not Share Host Namespaces](ocikubernetesmisconfig/rules/oci_no_host_namespace_sharing)
* [Pods That Do Not Use The API Should Disable Token Automount](ocikubernetesmisconfig/rules/oci_disable_token_automount)
* [pods/exec Should Not Be Granted To Broad Subjects](ocikubernetesmisconfig/rules/oci_restrict_pods_exec)
* [Prefer Bound Projected ServiceAccount Tokens Over Secret Tokens](ocikubernetesmisconfig/rules/oci_prefer_projected_sa_tokens)
* [Prefer Using Dedicated Service Accounts](ocikubernetesmisconfig/rules/oci_prefer_dedicated_service_accounts)
* [Prefer Using Secrets As Files Over Secrets As Environment Variables](ocikubernetesmisconfig/rules/oci_secrets_prefer_files_over_env)
* [Restrict Access To The Control Plane Endpoint](ocikubernetesmisconfig/rules/oci_restrict_access_to_control_plane_endpoint)
* [Restrict Use Of Cluster-Admin Role](ocikubernetesmisconfig/rules/oci_rbac_cluster_admin_role_least_privilege)
* [Secrets Should Be Encrypted At Rest](ocikubernetesmisconfig/rules/oci_secrets_encrypted_at_rest)
* [Sensitive Values Should Not Be Passed As Literal Env Vars](ocikubernetesmisconfig/rules/oci_no_literal_secret_env)
* [Tenant Namespaces Should Have A ResourceQuota](ocikubernetesmisconfig/rules/oci_namespace_resourcequota)
* [The Default Namespace Should Not Be Used](ocikubernetesmisconfig/rules/oci_general_default_namespace_not_used)