← Back to Home 📄 Display JSON

🔧 Component definition for Kubernetes 1.28

UUID: 8f7a9c2d-3e4b-4f5a-9c8d-7e6f5a4b3c2d

Version: V1.0

Last Modified: 2026-05-09 10:36:00+00:00

OSCAL Version: 1.2.1

Components: 2

Components and Control Implementations

🔧 Kubernetes_1.28

Type: software

Description: Kubernetes Container Orchestration Platform version 1.28

Rules Defined: 0

Control Implementation

Source: ../../catalogs/resolved-FedRAMP-Rev5-Moderate/catalog.json

Description: FedRAMP Rev 5 Moderate Baseline for Kubernetes

Controls Implemented: 17

▶ AC-2 (4 rules)

▶ AC-3 (4 rules)

▶ AC-6 (3 rules)

▶ AU-2 (4 rules)

▶ AU-6.4 (3 rules)

▶ CM-2 (3 rules)

▶ CM-6 (5 rules)

▶ CM-7 (4 rules)

▶ IA-5 (4 rules)

▶ SC-13 (4 rules)

▶ SC-23 (4 rules)

▶ SC-28 (3 rules)

▶ SC-7 (4 rules)

▶ SC-8 (6 rules)

▶ SI-2 (3 rules)

▶ SI-4 (3 rules)

▶ SI-7 (3 rules)

🔍 kube-bench

Type: validation

Description: CIS Kubernetes Benchmark validation using kube-bench

Checks Defined: 61

Validation Checks by Control

Total Checks: 61

Controls Covered: 1

▶ UNMAPPED (61 checks)

Rule ID: control_plane_api_server_anonymous_auth

Rule ID: control_plane_api_server_basic_auth

Rule ID: control_plane_api_server_token_auth

Rule ID: control_plane_api_server_kubelet_https

Rule ID: control_plane_api_server_kubelet_client_certificate

Rule ID: control_plane_api_server_kubelet_certificate_authority

Rule ID: control_plane_api_server_authorization_mode

Rule ID: control_plane_api_server_authorization_mode_node

Rule ID: control_plane_api_server_authorization_mode_rbac

Rule ID: control_plane_api_server_admission_control_plugin_always_admit

Rule ID: control_plane_api_server_admission_control_plugin_always_pull_images

Rule ID: control_plane_api_server_admission_control_plugin_security_context_deny

Rule ID: control_plane_api_server_admission_control_plugin_service_account

Rule ID: control_plane_api_server_admission_control_plugin_namespace_lifecycle

Rule ID: control_plane_api_server_admission_control_plugin_pod_security_policy

Rule ID: control_plane_api_server_admission_control_plugin_node_restriction

Rule ID: control_plane_api_server_insecure_port

Rule ID: control_plane_api_server_secure_port

Rule ID: control_plane_api_server_profiling

Rule ID: control_plane_api_server_audit_log_path

Rule ID: control_plane_api_server_audit_log_maxage

Rule ID: control_plane_api_server_audit_log_maxbackup

Rule ID: control_plane_api_server_audit_log_maxsize

Rule ID: control_plane_api_server_request_timeout

Rule ID: control_plane_api_server_service_account_lookup

Rule ID: control_plane_api_server_service_account_key_file

Rule ID: control_plane_api_server_etcd_certfile

Rule ID: control_plane_api_server_tls_cert_file

Rule ID: control_plane_api_server_client_ca_file

Rule ID: control_plane_api_server_etcd_cafile

Rule ID: control_plane_api_server_encryption_provider_config

Rule ID: control_plane_api_server_tls_cipher_suites

Rule ID: control_plane_scheduler_profiling

Rule ID: control_plane_scheduler_bind_address

Rule ID: control_plane_controller_manager_terminated_pod_gc_threshold

Rule ID: control_plane_controller_manager_profiling

Rule ID: control_plane_controller_manager_use_service_account_credentials

Rule ID: control_plane_controller_manager_service_account_private_key_file

Rule ID: control_plane_controller_manager_root_ca_file

Rule ID: control_plane_controller_manager_feature_gates_rotate_kubelet_server_certificate

Rule ID: control_plane_controller_manager_bind_address

Rule ID: worker_node_kubelet_anonymous_auth

Rule ID: worker_node_kubelet_authorization_mode

Rule ID: worker_node_kubelet_client_ca_file

Rule ID: worker_node_kubelet_read_only_port

Rule ID: worker_node_kubelet_streaming_connection_idle_timeout

Rule ID: worker_node_kubelet_protect_kernel_defaults

Rule ID: worker_node_kubelet_make_iptables_util_chains

Rule ID: worker_node_kubelet_hostname_override

Rule ID: worker_node_kubelet_event_qps

Rule ID: worker_node_kubelet_tls_cert_file

Rule ID: worker_node_kubelet_rotate_certificates

Rule ID: etcd_cert_file

Rule ID: etcd_client_cert_auth

Rule ID: etcd_auto_tls

Rule ID: etcd_peer_cert_file

Rule ID: etcd_peer_client_cert_auth

Rule ID: etcd_peer_auto_tls

Rule ID: etcd_unique_ca

Rule ID: network_policy_enabled

Rule ID: pod_security_policy_enabled