Skip to main content
KubeBench runs the CIS Kubernetes Benchmark against your cluster, testing node configurations, API server settings, etcd encryption, and security policies.

​
Targets

TargetExamples
MasterAPI server flags, controller-manager, scheduler
Nodekubelet authentication, read-only port, kernel params
EtcdEncryption at rest, client cert auth, peer encryption
PoliciesPod security standards, network policies, RBAC

​
Configuration

spec:
  security:
    kubeBench:
      enabled: true
      schedule: "0 */6 * * *"
      image: "aquasec/kube-bench:v0.8.0"
      targets: ["master", "node", "etcd", "policies"]

​
Dashboard

Results appear in Security Scanning → CIS Benchmarks with pass/fail/warn counts per section and remediation steps.