Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
Kubernetes must enable PodSecurity admission controller on static pods and Kubelets.
Description
Discussion Text
PodSecurity admission controller is a component that validates and enforces security policies for pods running within a Kubernetes cluster. It is responsible for evaluating the security context and configuration of pods against defined policies.
To enable PodSecurity admission controller on Static Pods (kube-apiserver, kube-controller-manager, or kube-schedule), the argument "--feature-gates=PodSecurity=true" must be set.
To enable PodSecurity admission controller on Kubelets, the featureGates PodSecurity=true argument must be set.
(Note: The PodSecurity feature gate is GA as of v1.25.)
To enable PodSecurity admission controller on Static Pods (kube-apiserver, kube-controller-manager, or kube-schedule), the argument "--feature-gates=PodSecurity=true" must be set.
To enable PodSecurity admission controller on Kubelets, the featureGates PodSecurity=true argument must be set.
(Note: The PodSecurity feature gate is GA as of v1.25.)
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.