Claude Skills by CyberStrikeus

Ensure ETag Response Header Fields Do Not Include Inodes

Ensure the TimeOut Is Set Properly

Ensure KeepAlive Is Enabled

Ensure MaxKeepAliveRequests Is Set Properly

Minimize access to privileged Security Context Constraints (Manual)

Minimize admission of containers sharing host process ID namespace (Manual)

Minimize admission of containers sharing host IPC namespace (Manual)

Minimize admission of containers sharing host network namespace (Manual)

Minimize admission of containers with allowPrivilegeEscalation (Manual)

Minimize admission of root containers (Manual)

Minimize admission of containers with NET_RAW capability (Manual)

Minimize admission of containers with added capabilities (Manual)

Minimize admission of containers with capabilities assigned (Manual)

Ensure CNI in use supports Network Policies (Manual)

Ensure all Namespaces have Network Policies defined (Manual)

Prefer using secrets as files over environment variables (Manual)

Consider external secret storage (Manual)

Configure Image Provenance using image controller config (Manual)

Create administrative boundaries using namespaces (Manual)

Ensure seccomp profile set to docker/default (Manual)

Apply Security Context to Your Pods and Containers (Manual)

The default namespace should not be used (Manual)

Ensure that the API server pod specification file permissions are set to 600 or more restrictive (Manual)

Ensure that the Container Network Interface file ownership is set to root:root (Manual)

Ensure that the etcd data directory permissions are set to 700 or more restrictive (Manual)

Ensure that the etcd data directory ownership is set to etcd:etcd (Manual)

Ensure that the kubeconfig file permissions are set to 600 or more restrictive (Manual)

Ensure that the kubeconfig file ownership is set to root:root (Manual)

Ensure that the Scheduler kubeconfig file permissions are set to 600 or more restrictive (Manual)

Ensure that the Scheduler kubeconfig file ownership is set to root:root (Manual)

Ensure that the Controller Manager kubeconfig file permissions are set to 600 or more restrictive (Manual)

Ensure that the Controller Manager kubeconfig file ownership is set to root:root (Manual)

Ensure that the OpenShift PKI directory and file ownership is set to root:root (Manual)

Ensure that the API server pod specification file ownership is set to root:root (Manual)

Ensure that the OpenShift PKI certificate file permissions are set to 600 or more restrictive (Manual)

Ensure that the OpenShift PKI key file permissions are set to 600 (Manual)

Ensure that the controller manager pod specification file permissions are set to 600 or more restrictive (Manual)

Ensure that the controller manager pod specification file ownership is set to root:root (Manual)

Ensure that the scheduler pod specification file permissions are set to 600 or more restrictive (Manual)

Ensure that the scheduler pod specification file ownership is set to root:root (Manual)

Ensure that the etcd pod specification file permissions are set to 600 or more restrictive (Manual)

Ensure that the etcd pod specification file ownership is set to root:root (Manual)

Ensure that the Container Network Interface file permissions are set to 600 or more restrictive (Manual)

Ensure that anonymous requests are authorized (Manual)

Ensure that the admission control plugin ServiceAccount is set (Manual)

Ensure that the admission control plugin NamespaceLifecycle is set (Manual)

Ensure that the admission control plugin SecurityContextConstraint is set (Manual)

Ensure that the admission control plugin NodeRestriction is set (Manual)

Ensure that the --insecure-bind-address argument is not set (Manual)

Ensure that the --insecure-port argument is set to 0 (Manual)