You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
@@ -95,14 +95,14 @@ Environmental controls such as RBAC and Service Account tests aren't evaluated b
95
95
96
96
As a secure service, Azure Kubernetes Service (AKS) complies with SOC, ISO, PCI DSS, and HIPAA standards. The following image shows the OpenSCAP file permission exceptions for the Cluster Manager AKS implementation.
97
97
98
-
:::image type="content" source="media/security/cm_openscap.png" alt-text="Screenshot of Cluster Manager OpenSCAP exceptions" lightbox="media/security/cm_openscap.png":::
98
+
:::image type="content" source="media/security/nexus-cluster-manager-openscap.png" alt-text="Screenshot of Cluster Manager OpenSCAP exceptions" lightbox="media/security/nexus-cluster-manager-openscap.png":::
99
99
100
100
101
101
### Aquasec Kube-Bench - CIS 1.9
102
102
103
-
*Undercloud*
103
+
*Cluster*
104
104
105
-
:::image type="content" source="media/security/undercloud_kubebench.png" alt-text="Screenshot of Undercloud Kube-Bench exceptions" lightbox="media/security/undercloud_kubebench.png":::
105
+
:::image type="content" source="media/security/nexus-cluster-kubebench.png" alt-text="Screenshot of Cluster Kube-Bench exceptions" lightbox="media/security/nexus-cluster-kubebench.png":::
106
106
107
107
|CIS ID|Recommendation description|Status|Issue|
108
108
|---|---|---|---|
@@ -113,9 +113,9 @@ As a secure service, Azure Kubernetes Service (AKS) complies with SOC, ISO, PCI
113
113
|1.1.12|Ensure that the `--kubelet-certificate-authority` argument is set as appropriate|NTF|Kubelet SANS includes hostname only|
114
114
115
115
116
-
*Nexus Kubernetes/NAKS*
116
+
*Nexus Kubernetes Cluster*
117
117
118
-
:::image type="content" source="media/security/naks_kubebench.png" alt-text="Screenshot of NAKS Kube-Bench exceptions" lightbox="media/security/naks_kubebench.png":::
@@ -130,4 +130,4 @@ As a secure service, Azure Kubernetes Service (AKS) complies with SOC, ISO, PCI
130
130
131
131
The Operator Nexus Cluster Manager is an AKS implementation. The following image shows the Kube-Bench exceptions for the Cluster Manager. A full report of CIS Benchmark control evaluation for Azure Kubernetes Service (AKS) can be found [here](/azure/aks/cis-kubernetes)
132
132
133
-
:::image type="content" source="media/security/cm_kubebench.png" alt-text="Screenshot of Cluster Manager Kube-Bench exceptions" lightbox="media/security/cm_kubebench.png":::
133
+
:::image type="content" source="media/security/nexus-cluster-manager-kubebench.png" alt-text="Screenshot of Cluster Manager Kube-Bench exceptions" lightbox="media/security/nexus-cluster-manager-kubebench.png":::
0 commit comments