1. Container-Optimized OS Should Be Enabled

More Info:

Ensures all Kubernetes cluster nodes have Container-Optimized OS enabled. Container-Optimized OS is optimized to enhance node security. It is backed by a team at Google that can quickly patch it.

Risk Level

High

Address

Security

Compliance Standards

CBP

Additional Reading: