| STIG ID | Version | Title | Product |
|---|---|---|---|
| CNTR-K8-003260 | V2R4 | The Kubernetes etcd must have file permissions set to 644 or more restrictive. | |
| CNTR-K8-003270 | V2R4 | The Kubernetes admin kubeconfig must have file permissions set to 644 or more restrictive. | |
| CNTR-K8-003280 | V2R4 | Kubernetes API Server audit logs must be enabled. | |
| CNTR-K8-003290 | V2R4 | The Kubernetes API Server must be set to audit log max size. | |
| CNTR-K8-003300 | V2R4 | The Kubernetes API Server must be set to audit log maximum backup. | |
| CNTR-K8-003310 | V2R4 | The Kubernetes API Server audit log retention must be set. | |
| CNTR-K8-003320 | V2R4 | The Kubernetes API Server audit log path must be set. | |
| CNTR-K8-003330 | V2R4 | The Kubernetes PKI CRT must have file permissions set to 644 or more restrictive. | |
| CNTR-K8-003340 | V2R4 | The Kubernetes PKI keys must have file permissions set to 600 or more restrictive. | |
| CNTR-OS-001060 | V1R1 | OpenShift must continuously scan components, containers, and images for vulnerabilities. |