Update docs/pages-for-subheaders/rke1-hardening-guide.md

Co-authored-by: Guilherme Macedo <guilherme@gmacedo.com>
This commit is contained in:
Andy Pitcher
2023-09-04 10:27:34 -04:00
committed by GitHub
co-authored by Guilherme Macedo
parent 0b9a2bc991
commit 4ca8cfada3
@@ -12,7 +12,9 @@ This hardening guide is intended to be used for RKE clusters and is associated w
| Rancher Version | CIS Benchmark Version | Kubernetes Version |
|-----------------|-----------------------|------------------------------|
| Rancher v2.7 | Benchmark v1.7 | Kubernetes v1.24 up to v1.25 |
| Rancher v2.7 | Benchmark v1.23 | Kubernetes v1.23 |
| Rancher v2.7 | Benchmark v1.24 | Kubernetes v1.24 |
| Rancher v2.7 | Benchmark v1.7 | Kubernetes v1.25 up to v1.26 |
:::note
- Since Benchmark v1.24, check id `4.1.7 Ensure that the certificate authorities file permissions are set to 600 or more restrictive (Automated)` might fail, as /etc/kubernetes/ssl/kube-ca.pem is provisioned in 644 by default.