From e0556a18af14acd22b72b23dc578ff233200887e Mon Sep 17 00:00:00 2001 From: Konstantinos Tsakalozos Date: Fri, 22 Nov 2024 12:08:38 +0200 Subject: [PATCH] Minor updates --- cfg/ck8s-cis-1.24/master.yaml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/cfg/ck8s-cis-1.24/master.yaml b/cfg/ck8s-cis-1.24/master.yaml index afba56eaa..f669b0b02 100644 --- a/cfg/ck8s-cis-1.24/master.yaml +++ b/cfg/ck8s-cis-1.24/master.yaml @@ -336,8 +336,8 @@ groups: - flag: "--token-auth-file" set: false remediation: | - Follow the documentation and configure alternate mechanisms for authentication. Then, - edit the API server configuration file $apiserverconf + Follow the Kubernetes documentation and configure alternate mechanisms for + authentication. Then, edit the API server configuration file $apiserverconf on the control plane node and remove the --token-auth-file argument. scored: true @@ -843,7 +843,7 @@ groups: Edit the Controller Manager configuration file $controllermanagerconf on the control plane node and set the --terminated-pod-gc-threshold to an appropriate threshold. - `--terminated-pod-gc-threshold=10` + `--terminated-pod-gc-threshold=12500` scored: false - id: 1.3.2