diff --git a/content/rancher/v2.6/en/security/_index.md b/content/rancher/v2.6/en/security/_index.md
index 1f121f11ed2..0cd5e3dcaf4 100644
--- a/content/rancher/v2.6/en/security/_index.md
+++ b/content/rancher/v2.6/en/security/_index.md
@@ -11,7 +11,7 @@ weight: 20
Reporting process
-Please submit possible security issues by emailing security@rancher.com .
+Please submit possible security issues by emailing security-rancher@suse.com .
|
Announcements
diff --git a/content/rancher/v2.6/en/security/hardening-guides/1.6-benchmark-2.6/Rancher_v2-6_CIS_v1-6_Benchmark_Assessment.pdf b/content/rancher/v2.6/en/security/hardening-guides/1.6-benchmark-2.6/Rancher_v2-6_CIS_v1-6_Benchmark_Assessment.pdf
new file mode 100644
index 00000000000..cba5bceac24
--- /dev/null
+++ b/content/rancher/v2.6/en/security/hardening-guides/1.6-benchmark-2.6/Rancher_v2-6_CIS_v1-6_Benchmark_Assessment.pdf
@@ -0,0 +1,14756 @@
+%PDF-1.7
+%🖤
+1 0 obj
+<<
+/Type /Pages
+/Kids [ 6 0 R 8 0 R 38 0 R 76 0 R 114 0 R 152 0 R 186 0 R 222 0 R 258 0 R 292 0 R 304 0 R 309 0 R 313 0 R 315 0 R 318 0 R 321 0 R 345 0 R 370 0 R 403 0 R 436 0 R 460 0 R 499 0 R 505 0 R 508 0 R 511 0 R 514 0 R 516 0 R 519 0 R 521 0 R 524 0 R 527 0 R 529 0 R 532 0 R 534 0 R 537 0 R 540 0 R 542 0 R 545 0 R 547 0 R 550 0 R 553 0 R 555 0 R 559 0 R 562 0 R 565 0 R 567 0 R 570 0 R 572 0 R 575 0 R 577 0 R 580 0 R 583 0 R 585 0 R 588 0 R 591 0 R 593 0 R 596 0 R 598 0 R 601 0 R 604 0 R 606 0 R 609 0 R 611 0 R 614 0 R 617 0 R 619 0 R 622 0 R 624 0 R 627 0 R 630 0 R 632 0 R 635 0 R 637 0 R 640 0 R 643 0 R 645 0 R 667 0 R 676 0 R 679 0 R 683 0 R 686 0 R 689 0 R 692 0 R 694 0 R 698 0 R 700 0 R 703 0 R 705 0 R 708 0 R 710 0 R 713 0 R 715 0 R 718 0 R 720 0 R 722 0 R 725 0 R 727 0 R 730 0 R 732 0 R 735 0 R 737 0 R 739 0 R 741 0 R 744 0 R 746 0 R 749 0 R 753 0 R 762 0 R 770 0 R 772 0 R 777 0 R 782 0 R 788 0 R 792 0 R 796 0 R 802 0 R 806 0 R 810 0 R 813 0 R 815 0 R 840 0 R 851 0 R 854 0 R 858 0 R 861 0 R 878 0 R 885 0 R 887 0 R 889 0 R 891 0 R ]
+/Count 130
+>>
+endobj
+2 0 obj
+<<
+/Title (CIS v1.6 Benchmark - Self-Assessment Guide - Rancher v2.6)
+/Creator (pandoc)
+/Producer (WeasyPrint 54.1)
+>>
+endobj
+3 0 obj
+<<
+/Type /Catalog
+/Pages 1 0 R
+/Outlines 1053 0 R
+/Names <<
+/Dests <<
+/Names [ (TOC) [ 8 0 R /XYZ 77.509843 756.850394 0 ] (api-server) [ 508 0 R /XYZ 41.740157 784.430079 0 ] (apply-security-context-to-your-pods-and-containers-manual) [ 889 0 R /XYZ 84.259843 324.051496 0 ] (authentication-and-authorization) [ 739 0 R /XYZ 41.740157 784.430079 0 ] (cb1) [ 315 0 R /XYZ 84.259843 207.170079 0 ] (cb1-1) [ 315 0 R /XYZ 101.433071 205.473057 0 ] (cb101) [ 624 0 R /XYZ 84.259843 715.370079 0 ] (cb101-1) [ 624 0 R /XYZ 101.433071 713.673057 0 ] (cb104) [ 627 0 R /XYZ 84.259843 241.820079 0 ] (cb104-1) [ 627 0 R /XYZ 101.433071 240.123057 0 ] (cb107) [ 632 0 R /XYZ 84.259843 463.070079 0 ] (cb107-1) [ 632 0 R /XYZ 101.433071 461.373057 0 ] (cb11) [ 436 0 R /XYZ 84.259843 543.320079 0 ] (cb11-1) [ 436 0 R /XYZ 101.433071 541.623057 0 ] (cb11-10) [ 436 0 R /XYZ 99.933071 333.205821 0 ] (cb11-11) [ 436 0 R /XYZ 99.933071 314.258799 0 ] (cb11-12) [ 436 0 R /XYZ 99.933071 295.311778 0 ] (cb11-13) [ 436 0 R /XYZ 99.933071 276.364756 0 ] (cb11-14) [ 436 0 R /XYZ 99.933071 257.417735 0 ] (cb11-15) [ 436 0 R /XYZ 99.933071 238.470714 0 ] (cb11-16) [ 436 0 R /XYZ 99.933071 219.523692 0 ] (cb11-17) [ 436 0 R /XYZ 99.933071 200.576671 0 ] (cb11-18) [ 436 0 R /XYZ 99.933071 181.629649 0 ] (cb11-19) [ 436 0 R /XYZ 99.933071 162.682628 0 ] (cb11-2) [ 436 0 R /XYZ 99.933071 522.676036 0 ] (cb11-20) [ 436 0 R /XYZ 99.933071 143.735606 0 ] (cb11-21) [ 436 0 R /XYZ 99.933071 124.788585 0 ] (cb11-22) [ 436 0 R /XYZ 99.933071 105.841563 0 ] (cb11-23) [ 460 0 R /XYZ 99.933071 799.173057 0 ] (cb11-24) [ 460 0 R /XYZ 99.933071 780.226036 0 ] (cb11-25) [ 460 0 R /XYZ 99.933071 761.279014 0 ] (cb11-26) [ 460 0 R /XYZ 99.933071 742.331993 0 ] (cb11-27) [ 460 0 R /XYZ 99.933071 723.384971 0 ] (cb11-28) [ 460 0 R /XYZ 99.933071 704.437950 0 ] (cb11-29) [ 460 0 R /XYZ 99.933071 685.490928 0 ] (cb11-3) [ 436 0 R /XYZ 99.933071 503.729014 0 ] (cb11-30) [ 460 0 R /XYZ 99.933071 666.543907 0 ] (cb11-31) [ 460 0 R /XYZ 99.933071 647.596885 0 ] (cb11-32) [ 460 0 R /XYZ 99.933071 628.649864 0 ] (cb11-33) [ 460 0 R /XYZ 99.933071 609.702842 0 ] (cb11-34) [ 460 0 R /XYZ 99.933071 590.755821 0 ] (cb11-35) [ 460 0 R /XYZ 99.933071 571.808799 0 ] (cb11-36) [ 460 0 R /XYZ 99.933071 552.861778 0 ] (cb11-37) [ 460 0 R /XYZ 99.933071 533.914756 0 ] (cb11-38) [ 460 0 R /XYZ 99.933071 514.967735 0 ] (cb11-39) [ 460 0 R /XYZ 99.933071 496.020714 0 ] (cb11-4) [ 436 0 R /XYZ 99.933071 465.834971 0 ] (cb11-40) [ 460 0 R /XYZ 99.933071 477.073692 0 ] (cb11-41) [ 460 0 R /XYZ 99.933071 458.126671 0 ] (cb11-42) [ 460 0 R /XYZ 99.933071 439.179649 0 ] (cb11-43) [ 460 0 R /XYZ 99.933071 420.232628 0 ] (cb11-44) [ 460 0 R /XYZ 99.933071 401.285606 0 ] (cb11-45) [ 460 0 R /XYZ 99.933071 382.338585 0 ] (cb11-46) [ 460 0 R /XYZ 99.933071 363.391563 0 ] (cb11-47) [ 460 0 R /XYZ 99.933071 344.444542 0 ] (cb11-48) [ 460 0 R /XYZ 99.933071 325.497520 0 ] (cb11-49) [ 460 0 R /XYZ 99.933071 306.550499 0 ] (cb11-5) [ 436 0 R /XYZ 99.933071 427.940928 0 ] (cb11-50) [ 460 0 R /XYZ 99.933071 287.603477 0 ] (cb11-51) [ 460 0 R /XYZ 99.933071 268.656456 0 ] (cb11-52) [ 460 0 R /XYZ 99.933071 249.709434 0 ] (cb11-53) [ 460 0 R /XYZ 99.933071 211.815391 0 ] (cb11-54) [ 460 0 R /XYZ 99.933071 192.868370 0 ] (cb11-55) [ 460 0 R /XYZ 99.933071 173.921348 0 ] (cb11-56) [ 460 0 R /XYZ 99.933071 154.974327 0 ] (cb11-57) [ 460 0 R /XYZ 99.933071 136.027305 0 ] (cb11-58) [ 460 0 R /XYZ 99.933071 117.080284 0 ] (cb11-59) [ 460 0 R /XYZ 99.933071 98.133262 0 ] (cb11-6) [ 436 0 R /XYZ 99.933071 408.993907 0 ] (cb11-60) [ 499 0 R /XYZ 99.933071 799.173057 0 ] (cb11-61) [ 499 0 R /XYZ 99.933071 780.226036 0 ] (cb11-7) [ 436 0 R /XYZ 99.933071 390.046885 0 ] (cb11-8) [ 436 0 R /XYZ 99.933071 371.099864 0 ] (cb11-9) [ 436 0 R /XYZ 99.933071 352.152842 0 ] (cb110) [ 637 0 R /XYZ 84.259843 715.370079 0 ] (cb110-1) [ 637 0 R /XYZ 101.433071 713.673057 0 ] (cb113) [ 640 0 R /XYZ 84.259843 241.820079 0 ] (cb113-1) [ 640 0 R /XYZ 101.433071 240.123057 0 ] (cb116) [ 645 0 R /XYZ 84.259843 511.820079 0 ] (cb116-1) [ 645 0 R /XYZ 101.433071 510.123057 0 ] (cb116-10) [ 645 0 R /XYZ 99.933071 282.758799 0 ] (cb116-11) [ 645 0 R /XYZ 99.933071 263.811778 0 ] (cb116-12) [ 645 0 R /XYZ 99.933071 244.864756 0 ] (cb116-13) [ 645 0 R /XYZ 99.933071 225.917735 0 ] (cb116-14) [ 645 0 R /XYZ 99.933071 206.970714 0 ] (cb116-15) [ 645 0 R /XYZ 99.933071 188.023692 0 ] (cb116-16) [ 645 0 R /XYZ 99.933071 169.076671 0 ] (cb116-17) [ 645 0 R /XYZ 99.933071 150.129649 0 ] (cb116-18) [ 645 0 R /XYZ 99.933071 131.182628 0 ] (cb116-19) [ 645 0 R /XYZ 99.933071 112.235606 0 ] (cb116-2) [ 645 0 R /XYZ 99.933071 491.176036 0 ] (cb116-20) [ 645 0 R /XYZ 99.933071 93.288585 0 ] (cb116-21) [ 667 0 R /XYZ 99.933071 799.173057 0 ] (cb116-22) [ 667 0 R /XYZ 99.933071 780.226036 0 ] (cb116-23) [ 667 0 R /XYZ 99.933071 761.279014 0 ] (cb116-24) [ 667 0 R /XYZ 99.933071 742.331993 0 ] (cb116-25) [ 667 0 R /XYZ 99.933071 723.384971 0 ] (cb116-3) [ 645 0 R /XYZ 99.933071 472.229014 0 ] (cb116-4) [ 645 0 R /XYZ 99.933071 434.334971 0 ] (cb116-5) [ 645 0 R /XYZ 99.933071 415.387950 0 ] (cb116-6) [ 645 0 R /XYZ 99.933071 396.440928 0 ] (cb116-7) [ 645 0 R /XYZ 99.933071 377.493907 0 ] (cb116-8) [ 645 0 R /XYZ 99.933071 358.546885 0 ] (cb116-9) [ 645 0 R /XYZ 99.933071 320.652842 0 ] (cb117) [ 667 0 R /XYZ 84.259843 664.134971 0 ] (cb117-1) [ 667 0 R /XYZ 101.433071 662.437950 0 ] (cb12) [ 499 0 R /XYZ 84.259843 720.976036 0 ] (cb12-1) [ 499 0 R /XYZ 101.433071 719.279014 0 ] (cb120) [ 667 0 R /XYZ 84.259843 290.887950 0 ] (cb120-1) [ 667 0 R /XYZ 101.433071 289.190928 0 ] (cb121) [ 676 0 R /XYZ 84.259843 550.251496 0 ] (cb121-1) [ 676 0 R /XYZ 101.433071 548.554475 0 ] (cb124) [ 679 0 R /XYZ 84.259843 715.370079 0 ] (cb124-1) [ 679 0 R /XYZ 101.433071 713.673057 0 ] (cb127) [ 679 0 R /XYZ 84.259843 162.123057 0 ] (cb127-1) [ 679 0 R /XYZ 101.433071 160.426036 0 ] (cb130) [ 683 0 R /XYZ 84.259843 325.820079 0 ] (cb130-1) [ 683 0 R /XYZ 101.433071 324.123057 0 ] (cb133) [ 686 0 R /XYZ 84.259843 500.570079 0 ] (cb133-1) [ 686 0 R /XYZ 101.433071 498.873057 0 ] (cb136) [ 689 0 R /XYZ 84.259843 441.170079 0 ] (cb136-1) [ 689 0 R /XYZ 101.433071 439.473057 0 ] (cb139) [ 694 0 R /XYZ 84.259843 565.251496 0 ] (cb139-1) [ 694 0 R /XYZ 101.433071 563.554475 0 ] (cb142) [ 694 0 R /XYZ 84.259843 214.504475 0 ] (cb142-1) [ 694 0 R /XYZ 101.433071 212.807453 0 ] (cb145) [ 700 0 R /XYZ 84.259843 514.251496 0 ] (cb145-1) [ 700 0 R /XYZ 101.433071 512.554475 0 ] (cb148) [ 705 0 R /XYZ 84.259843 403.070079 0 ] (cb148-1) [ 705 0 R /XYZ 101.433071 401.373057 0 ] (cb15) [ 499 0 R /XYZ 84.259843 392.729014 0 ] (cb15-1) [ 499 0 R /XYZ 101.433071 391.031993 0 ] (cb151) [ 710 0 R /XYZ 84.259843 290.570079 0 ] (cb151-1) [ 710 0 R /XYZ 101.433071 288.873057 0 ] (cb154) [ 715 0 R /XYZ 84.259843 148.070079 0 ] (cb154-1) [ 715 0 R /XYZ 101.433071 146.373057 0 ] (cb157) [ 722 0 R /XYZ 84.259843 715.370079 0 ] (cb157-1) [ 722 0 R /XYZ 101.433071 713.673057 0 ] (cb160) [ 727 0 R /XYZ 84.259843 571.820079 0 ] (cb160-1) [ 727 0 R /XYZ 101.433071 570.123057 0 ] (cb163) [ 732 0 R /XYZ 84.259843 425.570079 0 ] (cb163-1) [ 732 0 R /XYZ 101.433071 423.873057 0 ] (cb166) [ 741 0 R /XYZ 84.259843 595.251496 0 ] (cb166-1) [ 741 0 R /XYZ 101.433071 593.554475 0 ] (cb169) [ 746 0 R /XYZ 84.259843 267.651496 0 ] (cb169-1) [ 746 0 R /XYZ 101.433071 265.954475 0 ] (cb172) [ 749 0 R /XYZ 84.259843 607.820079 0 ] (cb172-1) [ 749 0 R /XYZ 101.433071 606.123057 0 ] (cb174) [ 749 0 R /XYZ 84.259843 298.679014 0 ] (cb174-1) [ 749 0 R /XYZ 101.433071 296.981993 0 ] (cb176) [ 753 0 R /XYZ 84.259843 715.370079 0 ] (cb176-1) [ 753 0 R /XYZ 101.433071 713.673057 0 ] (cb179) [ 753 0 R /XYZ 84.259843 375.479014 0 ] (cb179-1) [ 753 0 R /XYZ 101.433071 373.781993 0 ] (cb179-2) [ 753 0 R /XYZ 99.933071 354.834971 0 ] (cb179-3) [ 753 0 R /XYZ 99.933071 335.887950 0 ] (cb179-4) [ 753 0 R /XYZ 99.933071 279.046885 0 ] (cb179-5) [ 753 0 R /XYZ 99.933071 260.099864 0 ] (cb18) [ 505 0 R /XYZ 84.259843 715.370079 0 ] (cb18-1) [ 505 0 R /XYZ 101.433071 713.673057 0 ] (cb180) [ 753 0 R /XYZ 84.259843 200.849864 0 ] (cb180-1) [ 753 0 R /XYZ 101.433071 199.152842 0 ] (cb182) [ 762 0 R /XYZ 84.259843 655.220079 0 ] (cb182-1) [ 762 0 R /XYZ 101.433071 653.523057 0 ] (cb182-2) [ 762 0 R /XYZ 99.933071 634.576036 0 ] (cb182-3) [ 762 0 R /XYZ 99.933071 615.629014 0 ] (cb182-4) [ 762 0 R /XYZ 99.933071 558.787950 0 ] (cb182-5) [ 762 0 R /XYZ 99.933071 539.840928 0 ] (cb183) [ 762 0 R /XYZ 84.259843 480.590928 0 ] (cb183-1) [ 762 0 R /XYZ 101.433071 478.893907 0 ] (cb185) [ 772 0 R /XYZ 84.259843 490.251496 0 ] (cb185-1) [ 772 0 R /XYZ 101.433071 488.554475 0 ] (cb186) [ 772 0 R /XYZ 84.259843 429.304475 0 ] (cb186-1) [ 772 0 R /XYZ 101.433071 427.607453 0 ] (cb188) [ 772 0 R /XYZ 84.259843 116.807453 0 ] (cb188-1) [ 772 0 R /XYZ 101.433071 115.110432 0 ] (cb189) [ 777 0 R /XYZ 84.259843 772.370079 0 ] (cb189-1) [ 777 0 R /XYZ 101.433071 770.673057 0 ] (cb191) [ 777 0 R /XYZ 84.259843 459.873057 0 ] (cb191-1) [ 777 0 R /XYZ 101.433071 458.176036 0 ] (cb192) [ 777 0 R /XYZ 84.259843 398.926036 0 ] (cb192-1) [ 777 0 R /XYZ 101.433071 397.229014 0 ] (cb194) [ 782 0 R /XYZ 84.259843 799.370079 0 ] (cb194-1) [ 782 0 R /XYZ 101.433071 797.673057 0 ] (cb195) [ 782 0 R /XYZ 84.259843 738.423057 0 ] (cb195-1) [ 782 0 R /XYZ 101.433071 736.726036 0 ] (cb197) [ 782 0 R /XYZ 84.259843 410.926036 0 ] (cb197-1) [ 782 0 R /XYZ 101.433071 409.229014 0 ] (cb198) [ 782 0 R /XYZ 84.259843 349.979014 0 ] (cb198-1) [ 782 0 R /XYZ 101.433071 348.281993 0 ] (cb2) [ 318 0 R /XYZ 84.259843 730.370079 0 ] (cb2-1) [ 318 0 R /XYZ 101.433071 728.673057 0 ] (cb201) [ 788 0 R /XYZ 84.259843 230.570079 0 ] (cb201-1) [ 788 0 R /XYZ 101.433071 228.873057 0 ] (cb202) [ 788 0 R /XYZ 84.259843 169.623057 0 ] (cb202-1) [ 788 0 R /XYZ 101.433071 167.926036 0 ] (cb204) [ 792 0 R /XYZ 84.259843 583.970079 0 ] (cb204-1) [ 792 0 R /XYZ 101.433071 582.273057 0 ] (cb205) [ 792 0 R /XYZ 84.259843 523.023057 0 ] (cb205-1) [ 792 0 R /XYZ 101.433071 521.326036 0 ] (cb207) [ 796 0 R /XYZ 84.259843 700.370079 0 ] (cb207-1) [ 796 0 R /XYZ 101.433071 698.673057 0 ] (cb208) [ 796 0 R /XYZ 84.259843 639.423057 0 ] (cb208-1) [ 796 0 R /XYZ 101.433071 637.726036 0 ] (cb21) [ 508 0 R /XYZ 84.259843 565.251496 0 ] (cb21-1) [ 508 0 R /XYZ 101.433071 563.554475 0 ] (cb210) [ 796 0 R /XYZ 84.259843 296.926036 0 ] (cb210-1) [ 796 0 R /XYZ 101.433071 295.229014 0 ] (cb211) [ 796 0 R /XYZ 84.259843 235.979014 0 ] (cb211-1) [ 796 0 R /XYZ 101.433071 234.281993 0 ] (cb213) [ 802 0 R /XYZ 84.259843 640.370079 0 ] (cb213-1) [ 802 0 R /XYZ 101.433071 638.673057 0 ] (cb214) [ 802 0 R /XYZ 84.259843 579.423057 0 ] (cb214-1) [ 802 0 R /XYZ 101.433071 577.726036 0 ] (cb217) [ 806 0 R /XYZ 84.259843 428.570079 0 ] (cb217-1) [ 806 0 R /XYZ 101.433071 426.873057 0 ] (cb218) [ 806 0 R /XYZ 84.259843 131.823057 0 ] (cb218-1) [ 806 0 R /XYZ 101.433071 130.126036 0 ] (cb219) [ 810 0 R /XYZ 84.259843 799.370079 0 ] (cb219-1) [ 810 0 R /XYZ 101.433071 797.673057 0 ] (cb221) [ 815 0 R /XYZ 84.259843 768.620079 0 ] (cb221-1) [ 815 0 R /XYZ 101.433071 766.923057 0 ] (cb221-10) [ 815 0 R /XYZ 99.933071 596.399864 0 ] (cb221-11) [ 815 0 R /XYZ 99.933071 577.452842 0 ] (cb221-12) [ 815 0 R /XYZ 99.933071 482.717735 0 ] (cb221-13) [ 815 0 R /XYZ 99.933071 463.770714 0 ] (cb221-14) [ 815 0 R /XYZ 99.933071 444.823692 0 ] (cb221-15) [ 815 0 R /XYZ 99.933071 425.876671 0 ] (cb221-16) [ 815 0 R /XYZ 99.933071 406.929649 0 ] (cb221-17) [ 815 0 R /XYZ 99.933071 387.982628 0 ] (cb221-18) [ 815 0 R /XYZ 99.933071 350.088585 0 ] (cb221-19) [ 815 0 R /XYZ 99.933071 331.141563 0 ] (cb221-2) [ 815 0 R /XYZ 99.933071 747.976036 0 ] (cb221-20) [ 815 0 R /XYZ 99.933071 198.512413 0 ] (cb221-21) [ 815 0 R /XYZ 99.933071 179.565391 0 ] (cb221-22) [ 815 0 R /XYZ 99.933071 160.618370 0 ] (cb221-23) [ 815 0 R /XYZ 99.933071 103.777305 0 ] (cb221-24) [ 840 0 R /XYZ 99.933071 799.173057 0 ] (cb221-25) [ 840 0 R /XYZ 99.933071 780.226036 0 ] (cb221-26) [ 840 0 R /XYZ 99.933071 761.279014 0 ] (cb221-27) [ 840 0 R /XYZ 99.933071 742.331993 0 ] (cb221-28) [ 840 0 R /XYZ 99.933071 723.384971 0 ] (cb221-29) [ 840 0 R /XYZ 99.933071 704.437950 0 ] (cb221-3) [ 815 0 R /XYZ 99.933071 729.029014 0 ] (cb221-30) [ 840 0 R /XYZ 99.933071 685.490928 0 ] (cb221-31) [ 840 0 R /XYZ 99.933071 666.543907 0 ] (cb221-4) [ 815 0 R /XYZ 99.933071 710.081993 0 ] (cb221-5) [ 815 0 R /XYZ 99.933071 691.134971 0 ] (cb221-6) [ 815 0 R /XYZ 99.933071 672.187950 0 ] (cb221-7) [ 815 0 R /XYZ 99.933071 653.240928 0 ] (cb221-8) [ 815 0 R /XYZ 99.933071 634.293907 0 ] (cb221-9) [ 815 0 R /XYZ 99.933071 615.346885 0 ] (cb222) [ 840 0 R /XYZ 84.259843 607.293907 0 ] (cb222-1) [ 840 0 R /XYZ 101.433071 605.596885 0 ] (cb225) [ 851 0 R /XYZ 84.259843 434.451496 0 ] (cb225-1) [ 851 0 R /XYZ 101.433071 432.754475 0 ] (cb228) [ 854 0 R /XYZ 84.259843 799.370079 0 ] (cb228-1) [ 854 0 R /XYZ 101.433071 797.673057 0 ] (cb231) [ 854 0 R /XYZ 84.259843 448.229014 0 ] (cb231-1) [ 854 0 R /XYZ 101.433071 446.531993 0 ] (cb234) [ 858 0 R /XYZ 84.259843 799.370079 0 ] (cb234-1) [ 858 0 R /XYZ 101.433071 797.673057 0 ] (cb237) [ 861 0 R /XYZ 84.259843 394.701496 0 ] (cb237-1) [ 861 0 R /XYZ 101.433071 393.004475 0 ] (cb237-10) [ 861 0 R /XYZ 99.933071 222.481281 0 ] (cb237-11) [ 861 0 R /XYZ 99.933071 203.534260 0 ] (cb237-12) [ 861 0 R /XYZ 99.933071 165.640217 0 ] (cb237-13) [ 861 0 R /XYZ 99.933071 127.746174 0 ] (cb237-14) [ 861 0 R /XYZ 99.933071 108.799152 0 ] (cb237-15) [ 861 0 R /XYZ 99.933071 89.852131 0 ] (cb237-16) [ 878 0 R /XYZ 99.933071 799.173057 0 ] (cb237-17) [ 878 0 R /XYZ 99.933071 780.226036 0 ] (cb237-18) [ 878 0 R /XYZ 99.933071 761.279014 0 ] (cb237-19) [ 878 0 R /XYZ 99.933071 742.331993 0 ] (cb237-2) [ 861 0 R /XYZ 99.933071 374.057453 0 ] (cb237-3) [ 861 0 R /XYZ 99.933071 355.110432 0 ] (cb237-4) [ 861 0 R /XYZ 99.933071 336.163410 0 ] (cb237-5) [ 861 0 R /XYZ 99.933071 317.216389 0 ] (cb237-6) [ 861 0 R /XYZ 99.933071 298.269367 0 ] (cb237-7) [ 861 0 R /XYZ 99.933071 279.322346 0 ] (cb237-8) [ 861 0 R /XYZ 99.933071 260.375324 0 ] (cb237-9) [ 861 0 R /XYZ 99.933071 241.428303 0 ] (cb238) [ 878 0 R /XYZ 84.259843 683.081993 0 ] (cb238-1) [ 878 0 R /XYZ 101.433071 681.384971 0 ] (cb24) [ 511 0 R /XYZ 84.259843 106.820079 0 ] (cb24-1) [ 511 0 R /XYZ 101.433071 105.123057 0 ] (cb241) [ 891 0 R /XYZ 84.259843 768.620079 0 ] (cb241-1) [ 891 0 R /XYZ 101.433071 766.923057 0 ] (cb241-10) [ 891 0 R /XYZ 99.933071 596.399864 0 ] (cb241-11) [ 891 0 R /XYZ 99.933071 577.452842 0 ] (cb241-12) [ 891 0 R /XYZ 99.933071 520.611778 0 ] (cb241-13) [ 891 0 R /XYZ 99.933071 501.664756 0 ] (cb241-14) [ 891 0 R /XYZ 99.933071 482.717735 0 ] (cb241-15) [ 891 0 R /XYZ 99.933071 463.770714 0 ] (cb241-16) [ 891 0 R /XYZ 99.933071 444.823692 0 ] (cb241-17) [ 891 0 R /XYZ 99.933071 425.876671 0 ] (cb241-18) [ 891 0 R /XYZ 99.933071 406.929649 0 ] (cb241-2) [ 891 0 R /XYZ 99.933071 747.976036 0 ] (cb241-3) [ 891 0 R /XYZ 99.933071 729.029014 0 ] (cb241-4) [ 891 0 R /XYZ 99.933071 710.081993 0 ] (cb241-5) [ 891 0 R /XYZ 99.933071 691.134971 0 ] (cb241-6) [ 891 0 R /XYZ 99.933071 672.187950 0 ] (cb241-7) [ 891 0 R /XYZ 99.933071 653.240928 0 ] (cb241-8) [ 891 0 R /XYZ 99.933071 634.293907 0 ] (cb241-9) [ 891 0 R /XYZ 99.933071 615.346885 0 ] (cb242) [ 891 0 R /XYZ 84.259843 347.679649 0 ] (cb242-1) [ 891 0 R /XYZ 101.433071 345.982628 0 ] (cb27) [ 516 0 R /XYZ 84.259843 388.070079 0 ] (cb27-1) [ 516 0 R /XYZ 101.433071 386.373057 0 ] (cb3) [ 321 0 R /XYZ 84.259843 509.420079 0 ] (cb3-1) [ 321 0 R /XYZ 101.433071 507.723057 0 ] (cb3-10) [ 321 0 R /XYZ 99.933071 318.252842 0 ] (cb3-11) [ 321 0 R /XYZ 99.933071 299.305821 0 ] (cb3-12) [ 321 0 R /XYZ 99.933071 280.358799 0 ] (cb3-13) [ 321 0 R /XYZ 99.933071 261.411778 0 ] (cb3-14) [ 321 0 R /XYZ 99.933071 242.464756 0 ] (cb3-15) [ 321 0 R /XYZ 99.933071 223.517735 0 ] (cb3-16) [ 321 0 R /XYZ 99.933071 204.570714 0 ] (cb3-17) [ 321 0 R /XYZ 99.933071 185.623692 0 ] (cb3-18) [ 321 0 R /XYZ 99.933071 166.676671 0 ] (cb3-19) [ 321 0 R /XYZ 99.933071 147.729649 0 ] (cb3-2) [ 321 0 R /XYZ 99.933071 488.776036 0 ] (cb3-20) [ 321 0 R /XYZ 99.933071 128.782628 0 ] (cb3-21) [ 321 0 R /XYZ 99.933071 109.835606 0 ] (cb3-22) [ 321 0 R /XYZ 99.933071 90.888585 0 ] (cb3-23) [ 345 0 R /XYZ 99.933071 799.173057 0 ] (cb3-24) [ 345 0 R /XYZ 99.933071 780.226036 0 ] (cb3-25) [ 345 0 R /XYZ 99.933071 761.279014 0 ] (cb3-26) [ 345 0 R /XYZ 99.933071 742.331993 0 ] (cb3-27) [ 345 0 R /XYZ 99.933071 723.384971 0 ] (cb3-28) [ 345 0 R /XYZ 99.933071 704.437950 0 ] (cb3-29) [ 345 0 R /XYZ 99.933071 685.490928 0 ] (cb3-3) [ 321 0 R /XYZ 99.933071 469.829014 0 ] (cb3-30) [ 345 0 R /XYZ 99.933071 666.543907 0 ] (cb3-31) [ 345 0 R /XYZ 99.933071 647.596885 0 ] (cb3-32) [ 345 0 R /XYZ 99.933071 628.649864 0 ] (cb3-33) [ 345 0 R /XYZ 99.933071 609.702842 0 ] (cb3-34) [ 345 0 R /XYZ 99.933071 590.755821 0 ] (cb3-35) [ 345 0 R /XYZ 99.933071 571.808799 0 ] (cb3-36) [ 345 0 R /XYZ 99.933071 552.861778 0 ] (cb3-37) [ 345 0 R /XYZ 99.933071 533.914756 0 ] (cb3-38) [ 345 0 R /XYZ 99.933071 514.967735 0 ] (cb3-39) [ 345 0 R /XYZ 99.933071 496.020714 0 ] (cb3-4) [ 321 0 R /XYZ 99.933071 431.934971 0 ] (cb3-40) [ 345 0 R /XYZ 99.933071 477.073692 0 ] (cb3-41) [ 345 0 R /XYZ 99.933071 458.126671 0 ] (cb3-42) [ 345 0 R /XYZ 99.933071 439.179649 0 ] (cb3-43) [ 345 0 R /XYZ 99.933071 420.232628 0 ] (cb3-44) [ 345 0 R /XYZ 99.933071 401.285606 0 ] (cb3-5) [ 321 0 R /XYZ 99.933071 412.987950 0 ] (cb3-6) [ 321 0 R /XYZ 99.933071 394.040928 0 ] (cb3-7) [ 321 0 R /XYZ 99.933071 375.093907 0 ] (cb3-8) [ 321 0 R /XYZ 99.933071 356.146885 0 ] (cb3-9) [ 321 0 R /XYZ 99.933071 337.199864 0 ] (cb30) [ 521 0 R /XYZ 84.259843 643.970079 0 ] (cb30-1) [ 521 0 R /XYZ 101.433071 642.273057 0 ] (cb33) [ 524 0 R /XYZ 84.259843 136.820079 0 ] (cb33-1) [ 524 0 R /XYZ 101.433071 135.123057 0 ] (cb36) [ 529 0 R /XYZ 84.259843 358.070079 0 ] (cb36-1) [ 529 0 R /XYZ 101.433071 356.373057 0 ] (cb39) [ 534 0 R /XYZ 84.259843 628.970079 0 ] (cb39-1) [ 534 0 R /XYZ 101.433071 627.273057 0 ] (cb4) [ 345 0 R /XYZ 84.259843 342.035606 0 ] (cb4-1) [ 345 0 R /XYZ 101.433071 340.338585 0 ] (cb42) [ 537 0 R /XYZ 84.259843 181.820079 0 ] (cb42-1) [ 537 0 R /XYZ 101.433071 180.123057 0 ] (cb45) [ 542 0 R /XYZ 84.259843 463.070079 0 ] (cb45-1) [ 542 0 R /XYZ 101.433071 461.373057 0 ] (cb48) [ 547 0 R /XYZ 84.259843 715.370079 0 ] (cb48-1) [ 547 0 R /XYZ 101.433071 713.673057 0 ] (cb51) [ 550 0 R /XYZ 84.259843 181.820079 0 ] (cb51-1) [ 550 0 R /XYZ 101.433071 180.123057 0 ] (cb54) [ 555 0 R /XYZ 84.259843 350.570079 0 ] (cb54-1) [ 555 0 R /XYZ 101.433071 348.873057 0 ] (cb55) [ 555 0 R /XYZ 84.259843 113.823057 0 ] (cb55-1) [ 555 0 R /XYZ 101.433071 112.126036 0 ] (cb56) [ 559 0 R /XYZ 84.259843 613.970079 0 ] (cb56-1) [ 559 0 R /XYZ 101.433071 612.273057 0 ] (cb59) [ 562 0 R /XYZ 84.259843 144.320079 0 ] (cb59-1) [ 562 0 R /XYZ 101.433071 142.623057 0 ] (cb62) [ 567 0 R /XYZ 84.259843 358.070079 0 ] (cb62-1) [ 567 0 R /XYZ 101.433071 356.373057 0 ] (cb65) [ 572 0 R /XYZ 84.259843 508.070079 0 ] (cb65-1) [ 572 0 R /XYZ 101.433071 506.373057 0 ] (cb68) [ 577 0 R /XYZ 84.259843 715.370079 0 ] (cb68-1) [ 577 0 R /XYZ 101.433071 713.673057 0 ] (cb7) [ 370 0 R /XYZ 84.259843 711.620079 0 ] (cb7-1) [ 370 0 R /XYZ 101.433071 709.923057 0 ] (cb7-10) [ 370 0 R /XYZ 99.933071 501.505821 0 ] (cb7-11) [ 370 0 R /XYZ 99.933071 482.558799 0 ] (cb7-12) [ 370 0 R /XYZ 99.933071 463.611778 0 ] (cb7-13) [ 370 0 R /XYZ 99.933071 444.664756 0 ] (cb7-14) [ 370 0 R /XYZ 99.933071 425.717735 0 ] (cb7-15) [ 370 0 R /XYZ 99.933071 406.770714 0 ] (cb7-16) [ 370 0 R /XYZ 99.933071 387.823692 0 ] (cb7-17) [ 370 0 R /XYZ 99.933071 368.876671 0 ] (cb7-18) [ 370 0 R /XYZ 99.933071 349.929649 0 ] (cb7-19) [ 370 0 R /XYZ 99.933071 330.982628 0 ] (cb7-2) [ 370 0 R /XYZ 99.933071 690.976036 0 ] (cb7-20) [ 370 0 R /XYZ 99.933071 312.035606 0 ] (cb7-21) [ 370 0 R /XYZ 99.933071 293.088585 0 ] (cb7-22) [ 370 0 R /XYZ 99.933071 274.141563 0 ] (cb7-23) [ 370 0 R /XYZ 99.933071 255.194542 0 ] (cb7-24) [ 370 0 R /XYZ 99.933071 236.247520 0 ] (cb7-25) [ 370 0 R /XYZ 99.933071 217.300499 0 ] (cb7-26) [ 370 0 R /XYZ 99.933071 198.353477 0 ] (cb7-27) [ 370 0 R /XYZ 99.933071 179.406456 0 ] (cb7-28) [ 370 0 R /XYZ 99.933071 160.459434 0 ] (cb7-29) [ 370 0 R /XYZ 99.933071 141.512413 0 ] (cb7-3) [ 370 0 R /XYZ 99.933071 672.029014 0 ] (cb7-30) [ 370 0 R /XYZ 99.933071 122.565391 0 ] (cb7-31) [ 370 0 R /XYZ 99.933071 103.618370 0 ] (cb7-32) [ 403 0 R /XYZ 99.933071 799.173057 0 ] (cb7-33) [ 403 0 R /XYZ 99.933071 780.226036 0 ] (cb7-34) [ 403 0 R /XYZ 99.933071 761.279014 0 ] (cb7-35) [ 403 0 R /XYZ 99.933071 742.331993 0 ] (cb7-36) [ 403 0 R /XYZ 99.933071 723.384971 0 ] (cb7-37) [ 403 0 R /XYZ 99.933071 704.437950 0 ] (cb7-38) [ 403 0 R /XYZ 99.933071 685.490928 0 ] (cb7-39) [ 403 0 R /XYZ 99.933071 666.543907 0 ] (cb7-4) [ 370 0 R /XYZ 99.933071 634.134971 0 ] (cb7-40) [ 403 0 R /XYZ 99.933071 647.596885 0 ] (cb7-41) [ 403 0 R /XYZ 99.933071 628.649864 0 ] (cb7-42) [ 403 0 R /XYZ 99.933071 609.702842 0 ] (cb7-43) [ 403 0 R /XYZ 99.933071 590.755821 0 ] (cb7-44) [ 403 0 R /XYZ 99.933071 571.808799 0 ] (cb7-45) [ 403 0 R /XYZ 99.933071 552.861778 0 ] (cb7-46) [ 403 0 R /XYZ 99.933071 533.914756 0 ] (cb7-47) [ 403 0 R /XYZ 99.933071 514.967735 0 ] (cb7-48) [ 403 0 R /XYZ 99.933071 496.020714 0 ] (cb7-49) [ 403 0 R /XYZ 99.933071 477.073692 0 ] (cb7-5) [ 370 0 R /XYZ 99.933071 596.240928 0 ] (cb7-50) [ 403 0 R /XYZ 99.933071 458.126671 0 ] (cb7-51) [ 403 0 R /XYZ 99.933071 439.179649 0 ] (cb7-52) [ 403 0 R /XYZ 99.933071 420.232628 0 ] (cb7-53) [ 403 0 R /XYZ 99.933071 382.338585 0 ] (cb7-54) [ 403 0 R /XYZ 99.933071 363.391563 0 ] (cb7-55) [ 403 0 R /XYZ 99.933071 344.444542 0 ] (cb7-56) [ 403 0 R /XYZ 99.933071 325.497520 0 ] (cb7-57) [ 403 0 R /XYZ 99.933071 306.550499 0 ] (cb7-58) [ 403 0 R /XYZ 99.933071 287.603477 0 ] (cb7-59) [ 403 0 R /XYZ 99.933071 268.656456 0 ] (cb7-6) [ 370 0 R /XYZ 99.933071 577.293907 0 ] (cb7-60) [ 403 0 R /XYZ 99.933071 249.709434 0 ] (cb7-61) [ 403 0 R /XYZ 99.933071 230.762413 0 ] (cb7-7) [ 370 0 R /XYZ 99.933071 558.346885 0 ] (cb7-8) [ 370 0 R /XYZ 99.933071 539.399864 0 ] (cb7-9) [ 370 0 R /XYZ 99.933071 520.452842 0 ] (cb71) [ 580 0 R /XYZ 84.259843 271.820079 0 ] (cb71-1) [ 580 0 R /XYZ 101.433071 270.123057 0 ] (cb74) [ 585 0 R /XYZ 84.259843 538.070079 0 ] (cb74-1) [ 585 0 R /XYZ 101.433071 536.373057 0 ] (cb77) [ 588 0 R /XYZ 84.259843 103.070079 0 ] (cb77-1) [ 588 0 R /XYZ 101.433071 101.373057 0 ] (cb8) [ 403 0 R /XYZ 84.259843 171.512413 0 ] (cb8-1) [ 403 0 R /XYZ 101.433071 169.815391 0 ] (cb80) [ 593 0 R /XYZ 84.259843 373.070079 0 ] (cb80-1) [ 593 0 R /XYZ 101.433071 371.373057 0 ] (cb83) [ 598 0 R /XYZ 84.259843 628.970079 0 ] (cb83-1) [ 598 0 R /XYZ 101.433071 627.273057 0 ] (cb86) [ 601 0 R /XYZ 84.259843 181.820079 0 ] (cb86-1) [ 601 0 R /XYZ 101.433071 180.123057 0 ] (cb89) [ 606 0 R /XYZ 84.259843 463.070079 0 ] (cb89-1) [ 606 0 R /XYZ 101.433071 461.373057 0 ] (cb92) [ 611 0 R /XYZ 84.259843 715.370079 0 ] (cb92-1) [ 611 0 R /XYZ 101.433071 713.673057 0 ] (cb95) [ 614 0 R /XYZ 84.259843 223.070079 0 ] (cb95-1) [ 614 0 R /XYZ 101.433071 221.373057 0 ] (cb98) [ 619 0 R /XYZ 84.259843 463.070079 0 ] (cb98-1) [ 619 0 R /XYZ 101.433071 461.373057 0 ] (cis-v1.6-kubernetes-benchmark---rancher-v2.6-with-kubernetes-v1.18-to-v1.21) [ 304 0 R /XYZ 84.259843 784.970079 0 ] (client-certificate-authentication-should-not-be-used-for-users-manual) [ 739 0 R /XYZ 84.259843 684.651496 0 ] (configure-image-provenance-using-imagepolicywebhook-admission-controller-manual) [ 887 0 R /XYZ 84.259843 684.651496 0 ] (consider-external-secret-storage-manual) [ 885 0 R /XYZ 84.259843 568.851496 0 ] (contentsbox) [ 8 0 R /XYZ 77.509843 756.850394 0 ] (controller-manager) [ 676 0 R /XYZ 41.740157 784.430079 0 ] (controls) [ 309 0 R /XYZ 84.259843 608.631496 0 ] (create-administrative-boundaries-between-resources-using-namespaces-manual) [ 889 0 R /XYZ 84.259843 720.651496 0 ] (ensure-that-a-minimal-audit-policy-is-created-automated) [ 741 0 R /XYZ 84.259843 720.651496 0 ] (ensure-that-a-unique-certificate-authority-is-used-for-etcd-automated) [ 732 0 R /XYZ 84.259843 595.970079 0 ] (ensure-that-all-namespaces-have-network-policies-defined-automated) [ 861 0 R /XYZ 84.259843 538.851496 0 ] (ensure-that-default-service-accounts-are-not-actively-used.-automated) [ 813 0 R /XYZ 84.259843 206.451496 0 ] (ensure-that-encryption-providers-are-appropriately-configured-automated) [ 645 0 R /XYZ 84.259843 670.970079 0 ] (ensure-that-service-account-tokens-are-only-mounted-where-necessary-manual) [ 840 0 R /XYZ 84.259843 449.446885 0 ] (ensure-that-the---anonymous-auth-argument-is-set-to-false-automated) [ 508 0 R /XYZ 84.259843 720.651496 0 ] (ensure-that-the---audit-log-maxage-argument-is-set-to-30-or-as-appropriate-automated) [ 598 0 R /XYZ 84.259843 799.370079 0 ] (ensure-that-the---audit-log-maxbackup-argument-is-set-to-10-or-as-appropriate-automated) [ 601 0 R /XYZ 84.259843 352.220079 0 ] (ensure-that-the---audit-log-maxsize-argument-is-set-to-100-or-as-appropriate-automated) [ 606 0 R /XYZ 84.259843 633.470079 0 ] (ensure-that-the---audit-log-path-argument-is-set-automated) [ 593 0 R /XYZ 84.259843 558.470079 0 ] (ensure-that-the---authorization-mode-argument-includes-node-automated) [ 537 0 R /XYZ 84.259843 352.220079 0 ] (ensure-that-the---authorization-mode-argument-includes-rbac-automated) [ 542 0 R /XYZ 84.259843 633.470079 0 ] (ensure-that-the---authorization-mode-argument-is-not-set-to-alwaysallow-automated) [ 534 0 R /XYZ 84.259843 799.370079 0 ] (ensure-that-the---authorization-mode-argument-is-not-set-to-alwaysallow-automated-1) [ 772 0 R /XYZ 84.259843 332.207453 0 ] (ensure-that-the---auto-tls-argument-is-not-set-to-true-automated) [ 710 0 R /XYZ 84.259843 445.970079 0 ] (ensure-that-the---basic-auth-file-argument-is-not-set-automated) [ 511 0 R /XYZ 84.259843 277.220079 0 ] (ensure-that-the---bind-address-argument-is-set-to-127.0.0.1-automated) [ 689 0 R /XYZ 84.259843 596.570079 0 ] (ensure-that-the---bind-address-argument-is-set-to-127.0.0.1-automated-1) [ 694 0 R /XYZ 84.259843 369.904475 0 ] (ensure-that-the---cert-file-and---key-file-arguments-are-set-as-appropriate-automated) [ 700 0 R /XYZ 84.259843 684.651496 0 ] (ensure-that-the---client-ca-file-argument-is-set-as-appropriate-automated) [ 632 0 R /XYZ 84.259843 633.470079 0 ] (ensure-that-the---client-ca-file-argument-is-set-as-appropriate-automated-1) [ 777 0 R /XYZ 84.259843 675.273057 0 ] (ensure-that-the---client-cert-auth-argument-is-set-to-true-automated) [ 705 0 R /XYZ 84.259843 558.470079 0 ] (ensure-that-the---encryption-provider-config-argument-is-set-as-appropriate-automated) [ 640 0 R /XYZ 84.259843 427.220079 0 ] (ensure-that-the---etcd-cafile-argument-is-set-as-appropriate-automated) [ 635 0 R /XYZ 84.259843 183.470079 0 ] (ensure-that-the---etcd-certfile-and---etcd-keyfile-arguments-are-set-as-appropriate-automated) [ 622 0 R /XYZ 84.259843 183.470079 0 ] (ensure-that-the---event-qps-argument-is-set-to-0-or-a-level-which-ensures-appropriate-event-capture-automated) [ 792 0 R /XYZ 84.259843 208.126036 0 ] (ensure-that-the---hostname-override-argument-is-not-set-manual) [ 792 0 R /XYZ 84.259843 425.926036 0 ] (ensure-that-the---insecure-bind-address-argument-is-not-set-automated) [ 575 0 R /XYZ 84.259843 145.970079 0 ] (ensure-that-the---insecure-port-argument-is-set-to-0-automated) [ 580 0 R /XYZ 84.259843 427.220079 0 ] (ensure-that-the---kubeconfig-kubelet.conf-file-ownership-is-set-to-rootroot-automated) [ 749 0 R /XYZ 84.259843 163.687950 0 ] (ensure-that-the---kubeconfig-kubelet.conf-file-permissions-are-set-to-644-or-more-restrictive-automated) [ 749 0 R /XYZ 84.259843 454.079014 0 ] (ensure-that-the---kubelet-certificate-authority-argument-is-set-as-appropriate-automated) [ 529 0 R /XYZ 84.259843 558.470079 0 ] (ensure-that-the---kubelet-client-certificate-and---kubelet-client-key-arguments-are-set-as-appropriate-automated) [ 524 0 R /XYZ 84.259843 352.220079 0 ] (ensure-that-the---kubelet-https-argument-is-set-to-true-automated) [ 521 0 R /XYZ 84.259843 799.370079 0 ] (ensure-that-the---make-iptables-util-chains-argument-is-set-to-true-automated) [ 792 0 R /XYZ 84.259843 799.370079 0 ] (ensure-that-the---peer-auto-tls-argument-is-not-set-to-true-automated) [ 727 0 R /XYZ 84.259843 727.220079 0 ] (ensure-that-the---peer-cert-file-and---peer-key-file-arguments-are-set-as-appropriate-automated) [ 715 0 R /XYZ 84.259843 333.470079 0 ] (ensure-that-the---peer-client-cert-auth-argument-is-set-to-true-automated) [ 720 0 R /XYZ 84.259843 183.470079 0 ] (ensure-that-the---profiling-argument-is-set-to-false-automated) [ 588 0 R /XYZ 84.259843 258.470079 0 ] (ensure-that-the---profiling-argument-is-set-to-false-automated-1) [ 676 0 R /XYZ 84.259843 167.404475 0 ] (ensure-that-the---profiling-argument-is-set-to-false-automated-2) [ 694 0 R /XYZ 84.259843 720.651496 0 ] (ensure-that-the---protect-kernel-defaults-argument-is-set-to-true-automated) [ 788 0 R /XYZ 84.259843 445.970079 0 ] (ensure-that-the---read-only-port-argument-is-set-to-0-automated) [ 777 0 R /XYZ 84.259843 301.829014 0 ] (ensure-that-the---request-timeout-argument-is-set-as-appropriate-automated) [ 609 0 R /XYZ 84.259843 183.470079 0 ] (ensure-that-the---root-ca-file-argument-is-set-as-appropriate-automated) [ 686 0 R /XYZ 84.259843 670.970079 0 ] (ensure-that-the---rotate-certificates-argument-is-not-set-to-false-automated) [ 796 0 R /XYZ 84.259843 138.881993 0 ] (ensure-that-the---secure-port-argument-is-not-set-to-0-automated) [ 585 0 R /XYZ 84.259843 708.470079 0 ] (ensure-that-the---service-account-key-file-argument-is-set-as-appropriate-automated) [ 619 0 R /XYZ 84.259843 633.470079 0 ] (ensure-that-the---service-account-lookup-argument-is-set-to-true-automated) [ 614 0 R /XYZ 84.259843 408.470079 0 ] (ensure-that-the---service-account-private-key-file-argument-is-set-as-appropriate-automated) [ 683 0 R /XYZ 84.259843 511.220079 0 ] (ensure-that-the---streaming-connection-idle-timeout-argument-is-not-set-to-0-automated) [ 782 0 R /XYZ 84.259843 641.326036 0 ] (ensure-that-the---terminated-pod-gc-threshold-argument-is-set-as-appropriate-automated) [ 676 0 R /XYZ 84.259843 720.651496 0 ] (ensure-that-the---tls-cert-file-and---tls-private-key-file-arguments-are-set-as-appropriate-automated) [ 627 0 R /XYZ 84.259843 427.220079 0 ] (ensure-that-the---tls-cert-file-and---tls-private-key-file-arguments-are-set-as-appropriate-automated-1) [ 796 0 R /XYZ 84.259843 542.326036 0 ] (ensure-that-the---token-auth-file-parameter-is-not-set-automated) [ 516 0 R /XYZ 84.259843 558.470079 0 ] (ensure-that-the---use-service-account-credentials-argument-is-set-to-true-automated) [ 679 0 R /XYZ 84.259843 332.523057 0 ] (ensure-that-the-admin.conf-file-ownership-is-set-to-rootroot-automated) [ 318 0 R /XYZ 84.259843 578.223057 0 ] (ensure-that-the-admin.conf-file-permissions-are-set-to-644-or-more-restrictive-automated) [ 318 0 R /XYZ 84.259843 694.023057 0 ] (ensure-that-the-admission-control-plugin-alwaysadmit-is-not-set-automated) [ 550 0 R /XYZ 84.259843 352.220079 0 ] (ensure-that-the-admission-control-plugin-alwayspullimages-is-set-manual) [ 555 0 R /XYZ 84.259843 520.970079 0 ] (ensure-that-the-admission-control-plugin-eventratelimit-is-set-automated) [ 545 0 R /XYZ 84.259843 183.470079 0 ] (ensure-that-the-admission-control-plugin-namespacelifecycle-is-set-automated) [ 562 0 R /XYZ 84.259843 314.720079 0 ] (ensure-that-the-admission-control-plugin-noderestriction-is-set-automated) [ 572 0 R /XYZ 84.259843 708.470079 0 ] (ensure-that-the-admission-control-plugin-podsecuritypolicy-is-set-automated) [ 567 0 R /XYZ 84.259843 558.470079 0 ] (ensure-that-the-admission-control-plugin-securitycontextdeny-is-set-if-podsecuritypolicy-is-not-used-manual) [ 555 0 R /XYZ 84.259843 314.223057 0 ] (ensure-that-the-admission-control-plugin-serviceaccount-is-set-automated) [ 559 0 R /XYZ 84.259843 799.370079 0 ] (ensure-that-the-anonymous-auth-argument-is-set-to-false-automated) [ 772 0 R /XYZ 84.259843 720.651496 0 ] (ensure-that-the-api-server-only-makes-use-of-strong-cryptographic-ciphers-automated) [ 667 0 R /XYZ 84.259843 506.287950 0 ] (ensure-that-the-api-server-pod-specification-file-ownership-is-set-to-rootroot-automated) [ 313 0 R /XYZ 84.259843 553.851496 0 ] (ensure-that-the-api-server-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated) [ 313 0 R /XYZ 84.259843 684.651496 0 ] (ensure-that-the-audit-policy-covers-key-security-concerns-manual) [ 744 0 R /XYZ 84.259843 314.720079 0 ] (ensure-that-the-certificate-authorities-file-permissions-are-set-to-644-or-more-restrictive-automated) [ 753 0 R /XYZ 84.259843 519.629014 0 ] (ensure-that-the-client-certificate-authorities-file-ownership-is-set-to-rootroot-automated) [ 762 0 R /XYZ 84.259843 799.370079 0 ] (ensure-that-the-cluster-admin-role-is-only-used-where-required-manual) [ 813 0 R /XYZ 84.259843 684.651496 0 ] (ensure-that-the-cni-in-use-supports-network-policies-manual) [ 861 0 R /XYZ 84.259843 684.651496 0 ] (ensure-that-the-container-network-interface-file-ownership-is-set-to-rootroot-manual) [ 315 0 R /XYZ 84.259843 170.823057 0 ] (ensure-that-the-container-network-interface-file-permissions-are-set-to-644-or-more-restrictive-manual) [ 315 0 R /XYZ 84.259843 347.570079 0 ] (ensure-that-the-controller-manager-pod-specification-file-ownership-is-set-to-rootroot-automated) [ 313 0 R /XYZ 84.259843 277.251496 0 ] (ensure-that-the-controller-manager-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated) [ 313 0 R /XYZ 84.259843 423.051496 0 ] (ensure-that-the-controller-manager.conf-file-ownership-is-set-to-rootroot-automated) [ 321 0 R /XYZ 84.259843 799.370079 0 ] (ensure-that-the-controller-manager.conf-file-permissions-are-set-to-644-or-more-restrictive-automated) [ 318 0 R /XYZ 84.259843 200.823057 0 ] (ensure-that-the-etcd-data-directory-ownership-is-set-to-etcdetcd-automated) [ 499 0 R /XYZ 84.259843 234.881993 0 ] (ensure-that-the-etcd-data-directory-permissions-are-set-to-700-or-more-restrictive-automated) [ 499 0 R /XYZ 84.259843 563.129014 0 ] (ensure-that-the-etcd-pod-specification-file-ownership-is-set-to-rootroot-automated) [ 315 0 R /XYZ 84.259843 478.370079 0 ] (ensure-that-the-etcd-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated) [ 315 0 R /XYZ 84.259843 609.170079 0 ] (ensure-that-the-kubelet---config-configuration-file-has-permissions-set-to-644-or-more-restrictive-automated) [ 762 0 R /XYZ 84.259843 383.493907 0 ] (ensure-that-the-kubelet---config-configuration-file-ownership-is-set-to-rootroot-automated) [ 762 0 R /XYZ 84.259843 195.693907 0 ] (ensure-that-the-kubelet-only-makes-use-of-strong-cryptographic-ciphers-automated) [ 806 0 R /XYZ 84.259843 392.223057 0 ] (ensure-that-the-kubelet-service-file-ownership-is-set-to-rootroot-automated) [ 746 0 R /XYZ 84.259843 553.851496 0 ] (ensure-that-the-kubelet-service-file-permissions-are-set-to-644-or-more-restrictive-automated) [ 746 0 R /XYZ 84.259843 684.651496 0 ] (ensure-that-the-kubernetes-pki-certificate-file-permissions-are-set-to-644-or-more-restrictive-automated) [ 345 0 R /XYZ 84.259843 184.188585 0 ] (ensure-that-the-kubernetes-pki-directory-and-file-ownership-is-set-to-rootroot-automated) [ 321 0 R /XYZ 84.259843 668.570079 0 ] (ensure-that-the-kubernetes-pki-key-file-permissions-are-set-to-600-automated) [ 436 0 R /XYZ 84.259843 702.470079 0 ] (ensure-that-the-proxy-kubeconfig-file-ownership-is-set-to-rootroot-automated) [ 749 0 R /XYZ 84.259843 763.220079 0 ] (ensure-that-the-rotatekubeletservercertificate-argument-is-set-to-true-automated) [ 689 0 R /XYZ 84.259843 799.370079 0 ] (ensure-that-the-scheduler-pod-specification-file-ownership-is-set-to-rootroot-automated) [ 315 0 R /XYZ 84.259843 739.970079 0 ] (ensure-that-the-scheduler-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated) [ 313 0 R /XYZ 84.259843 146.451496 0 ] (ensure-that-the-scheduler.conf-file-ownership-is-set-to-rootroot-automated) [ 318 0 R /XYZ 84.259843 331.623057 0 ] (ensure-that-the-scheduler.conf-file-permissions-are-set-to-644-or-more-restrictive-automated) [ 318 0 R /XYZ 84.259843 462.423057 0 ] (ensure-that-the-seccomp-profile-is-set-to-dockerdefault-in-your-pod-definitions-manual) [ 889 0 R /XYZ 84.259843 604.851496 0 ] (etcd-node-configuration-files) [ 700 0 R /XYZ 41.740157 784.430079 0 ] (extensible-admission-control) [ 887 0 R /XYZ 41.740157 784.430079 0 ] (general-policies) [ 889 0 R /XYZ 41.740157 784.430079 0 ] (header_bottom_text) [ 6 0 R /XYZ 85.009843 392.718898 0 ] (if-proxy-kubeconfig-file-exists-ensure-permissions-are-set-to-644-or-more-restrictive-automated) [ 746 0 R /XYZ 84.259843 423.051496 0 ] (kubelet) [ 772 0 R /XYZ 41.740157 784.430079 0 ] (logging) [ 741 0 R /XYZ 41.740157 784.430079 0 ] (master-node-configuration-files) [ 313 0 R /XYZ 41.740157 784.430079 0 ] (minimize-access-to-create-pods-manual) [ 813 0 R /XYZ 84.259843 307.251496 0 ] (minimize-access-to-secrets-manual) [ 813 0 R /XYZ 84.259843 523.851496 0 ] (minimize-the-admission-of-containers-wishing-to-share-the-host-ipc-namespace-automated) [ 851 0 R /XYZ 84.259843 238.710432 0 ] (minimize-the-admission-of-containers-wishing-to-share-the-host-network-namespace-automated) [ 854 0 R /XYZ 84.259843 603.629014 0 ] (minimize-the-admission-of-containers-wishing-to-share-the-host-process-id-namespace-automated) [ 851 0 R /XYZ 84.259843 589.851496 0 ] (minimize-the-admission-of-containers-with-added-capabilities-manual) [ 858 0 R /XYZ 84.259843 323.081993 0 ] (minimize-the-admission-of-containers-with-allowprivilegeescalation-automated) [ 854 0 R /XYZ 84.259843 252.487950 0 ] (minimize-the-admission-of-containers-with-capabilities-assigned-manual) [ 858 0 R /XYZ 84.259843 207.281993 0 ] (minimize-the-admission-of-containers-with-the-net_raw-capability-manual) [ 858 0 R /XYZ 84.259843 453.881993 0 ] (minimize-the-admission-of-privileged-containers-manual) [ 851 0 R /XYZ 84.259843 720.651496 0 ] (minimize-the-admission-of-root-containers-manual) [ 858 0 R /XYZ 84.259843 584.681993 0 ] (minimize-wildcard-use-in-roles-and-clusterroles-manual) [ 813 0 R /XYZ 84.259843 423.051496 0 ] (network-policies-and-cni) [ 861 0 R /XYZ 41.740157 784.430079 0 ] (overview) [ 304 0 R /XYZ 84.259843 704.822079 0 ] (pod-security-policies) [ 851 0 R /XYZ 41.740157 784.430079 0 ] (prefer-using-secrets-as-files-over-secrets-as-environment-variables-manual) [ 885 0 R /XYZ 84.259843 684.651496 0 ] (rbac-and-service-accounts) [ 813 0 R /XYZ 41.740157 784.430079 0 ] (scheduler) [ 694 0 R /XYZ 41.740157 784.430079 0 ] (secrets-management) [ 885 0 R /XYZ 41.740157 784.430079 0 ] (testing-controls-methodology) [ 304 0 R /XYZ 84.259843 166.076079 0 ] (the-default-namespace-should-not-be-used-automated) [ 889 0 R /XYZ 84.259843 193.251496 0 ] (title-block-header) [ 6 0 R /XYZ 84.259843 502.818898 0 ] (verify-that-the-rotatekubeletservercertificate-argument-is-set-to-true-automated) [ 806 0 R /XYZ 84.259843 670.970079 0 ] (worker-node-configuration-files) [ 746 0 R /XYZ 41.740157 784.430079 0 ] ]
+>>
+>>
+>>
+endobj
+4 0 obj
+<<
+/ExtGState <<
+/a1.0 <<
+/ca 1
+>>
+/A1.0 <<
+/CA 1
+>>
+>>
+/XObject <<
+>>
+/Pattern <<
+>>
+/Shading <<
+>>
+/Font 1074 0 R
+>>
+endobj
+5 0 obj
+<<
+/Filter /FlateDecode
+/Length 2619
+>>
+stream
+x[
Wu +H @(^8A./f!vŮG>D=$ς?ZΗ7' 5=jȱo\5ԞS-~ |