diff --git a/content/rancher/v2.6/en/security/_index.md b/content/rancher/v2.6/en/security/_index.md
index 1f121f11ed2..0cd5e3dcaf4 100644
--- a/content/rancher/v2.6/en/security/_index.md
+++ b/content/rancher/v2.6/en/security/_index.md
@@ -11,7 +11,7 @@ weight: 20
Reporting process
-Please submit possible security issues by emailing security@rancher.com .
+Please submit possible security issues by emailing security-rancher@suse.com .
|
Announcements
diff --git a/content/rancher/v2.6/en/security/hardening-guides/1.6-benchmark-2.6/Rancher_v2-6_CIS_v1-6_Benchmark_Assessment.pdf b/content/rancher/v2.6/en/security/hardening-guides/1.6-benchmark-2.6/Rancher_v2-6_CIS_v1-6_Benchmark_Assessment.pdf
new file mode 100644
index 00000000000..461c98f592c
--- /dev/null
+++ b/content/rancher/v2.6/en/security/hardening-guides/1.6-benchmark-2.6/Rancher_v2-6_CIS_v1-6_Benchmark_Assessment.pdf
@@ -0,0 +1,14728 @@
+%PDF-1.7
+%🖤
+1 0 obj
+<<
+/Type /Pages
+/Kids [ 6 0 R 8 0 R 50 0 R 106 0 R 156 0 R 206 0 R 258 0 R 298 0 R 303 0 R 307 0 R 309 0 R 311 0 R 315 0 R 330 0 R 364 0 R 389 0 R 427 0 R 446 0 R 486 0 R 499 0 R 502 0 R 505 0 R 508 0 R 510 0 R 513 0 R 515 0 R 518 0 R 521 0 R 523 0 R 526 0 R 528 0 R 531 0 R 534 0 R 536 0 R 539 0 R 541 0 R 544 0 R 546 0 R 549 0 R 552 0 R 556 0 R 558 0 R 561 0 R 564 0 R 566 0 R 569 0 R 571 0 R 574 0 R 577 0 R 579 0 R 582 0 R 584 0 R 587 0 R 590 0 R 592 0 R 595 0 R 597 0 R 600 0 R 603 0 R 605 0 R 608 0 R 610 0 R 613 0 R 616 0 R 618 0 R 621 0 R 623 0 R 626 0 R 629 0 R 631 0 R 634 0 R 636 0 R 639 0 R 645 0 R 669 0 R 672 0 R 675 0 R 679 0 R 682 0 R 685 0 R 688 0 R 690 0 R 694 0 R 696 0 R 699 0 R 701 0 R 704 0 R 706 0 R 709 0 R 711 0 R 713 0 R 716 0 R 718 0 R 721 0 R 723 0 R 726 0 R 728 0 R 731 0 R 733 0 R 735 0 R 737 0 R 740 0 R 742 0 R 745 0 R 749 0 R 758 0 R 766 0 R 768 0 R 773 0 R 778 0 R 784 0 R 788 0 R 792 0 R 798 0 R 802 0 R 805 0 R 809 0 R 811 0 R 835 0 R 847 0 R 850 0 R 854 0 R 857 0 R 859 0 R 875 0 R 883 0 R 885 0 R 887 0 R 889 0 R ]
+/Count 129
+>>
+endobj
+2 0 obj
+<<
+/Title (CIS v1.6 Benchmark - Self-Assessment Guide - Rancher v2.6)
+/Creator (pandoc)
+/Producer (WeasyPrint 54.0)
+>>
+endobj
+3 0 obj
+<<
+/Type /Catalog
+/Pages 1 0 R
+/Outlines 1051 0 R
+/Names <<
+/Dests <<
+/Names [ (TOC) [ 8 0 R /XYZ 77.509843 756.850394 0 ] (api-server) [ 502 0 R /XYZ 41.740157 784.430079 0 ] (apply-security-context-to-your-pods-and-containers-manual) [ 887 0 R /XYZ 84.259843 312.591496 0 ] (authentication-and-authorization) [ 735 0 R /XYZ 41.740157 784.430079 0 ] (cb1) [ 311 0 R /XYZ 84.259843 799.370079 0 ] (cb1-1) [ 311 0 R /XYZ 101.433071 797.673057 0 ] (cb101) [ 618 0 R /XYZ 84.259843 372.020079 0 ] (cb101-1) [ 618 0 R /XYZ 101.433071 370.323057 0 ] (cb104) [ 623 0 R /XYZ 84.259843 596.570079 0 ] (cb104-1) [ 623 0 R /XYZ 101.433071 594.873057 0 ] (cb107) [ 626 0 R /XYZ 84.259843 120.770079 0 ] (cb107-1) [ 626 0 R /XYZ 101.433071 119.073057 0 ] (cb11) [ 427 0 R /XYZ 84.259843 380.231993 0 ] (cb11-1) [ 427 0 R /XYZ 101.433071 378.534971 0 ] (cb11-10) [ 427 0 R /XYZ 99.933071 170.117735 0 ] (cb11-11) [ 427 0 R /XYZ 99.933071 151.170714 0 ] (cb11-12) [ 427 0 R /XYZ 99.933071 132.223692 0 ] (cb11-13) [ 427 0 R /XYZ 99.933071 113.276671 0 ] (cb11-14) [ 427 0 R /XYZ 99.933071 94.329649 0 ] (cb11-15) [ 446 0 R /XYZ 99.933071 799.173057 0 ] (cb11-16) [ 446 0 R /XYZ 99.933071 780.226036 0 ] (cb11-17) [ 446 0 R /XYZ 99.933071 761.279014 0 ] (cb11-18) [ 446 0 R /XYZ 99.933071 742.331993 0 ] (cb11-19) [ 446 0 R /XYZ 99.933071 723.384971 0 ] (cb11-2) [ 427 0 R /XYZ 99.933071 359.587950 0 ] (cb11-20) [ 446 0 R /XYZ 99.933071 704.437950 0 ] (cb11-21) [ 446 0 R /XYZ 99.933071 685.490928 0 ] (cb11-22) [ 446 0 R /XYZ 99.933071 666.543907 0 ] (cb11-23) [ 446 0 R /XYZ 99.933071 647.596885 0 ] (cb11-24) [ 446 0 R /XYZ 99.933071 628.649864 0 ] (cb11-25) [ 446 0 R /XYZ 99.933071 609.702842 0 ] (cb11-26) [ 446 0 R /XYZ 99.933071 590.755821 0 ] (cb11-27) [ 446 0 R /XYZ 99.933071 571.808799 0 ] (cb11-28) [ 446 0 R /XYZ 99.933071 552.861778 0 ] (cb11-29) [ 446 0 R /XYZ 99.933071 533.914756 0 ] (cb11-3) [ 427 0 R /XYZ 99.933071 340.640928 0 ] (cb11-30) [ 446 0 R /XYZ 99.933071 514.967735 0 ] (cb11-31) [ 446 0 R /XYZ 99.933071 496.020714 0 ] (cb11-32) [ 446 0 R /XYZ 99.933071 477.073692 0 ] (cb11-33) [ 446 0 R /XYZ 99.933071 458.126671 0 ] (cb11-34) [ 446 0 R /XYZ 99.933071 439.179649 0 ] (cb11-35) [ 446 0 R /XYZ 99.933071 420.232628 0 ] (cb11-36) [ 446 0 R /XYZ 99.933071 401.285606 0 ] (cb11-37) [ 446 0 R /XYZ 99.933071 382.338585 0 ] (cb11-38) [ 446 0 R /XYZ 99.933071 363.391563 0 ] (cb11-39) [ 446 0 R /XYZ 99.933071 344.444542 0 ] (cb11-4) [ 427 0 R /XYZ 99.933071 302.746885 0 ] (cb11-40) [ 446 0 R /XYZ 99.933071 325.497520 0 ] (cb11-41) [ 446 0 R /XYZ 99.933071 306.550499 0 ] (cb11-42) [ 446 0 R /XYZ 99.933071 287.603477 0 ] (cb11-43) [ 446 0 R /XYZ 99.933071 268.656456 0 ] (cb11-44) [ 446 0 R /XYZ 99.933071 249.709434 0 ] (cb11-45) [ 446 0 R /XYZ 99.933071 230.762413 0 ] (cb11-46) [ 446 0 R /XYZ 99.933071 211.815391 0 ] (cb11-47) [ 446 0 R /XYZ 99.933071 192.868370 0 ] (cb11-48) [ 446 0 R /XYZ 99.933071 173.921348 0 ] (cb11-49) [ 446 0 R /XYZ 99.933071 154.974327 0 ] (cb11-5) [ 427 0 R /XYZ 99.933071 264.852842 0 ] (cb11-50) [ 446 0 R /XYZ 99.933071 136.027305 0 ] (cb11-51) [ 446 0 R /XYZ 99.933071 117.080284 0 ] (cb11-52) [ 446 0 R /XYZ 99.933071 98.133262 0 ] (cb11-53) [ 486 0 R /XYZ 99.933071 780.226036 0 ] (cb11-54) [ 486 0 R /XYZ 99.933071 761.279014 0 ] (cb11-55) [ 486 0 R /XYZ 99.933071 742.331993 0 ] (cb11-56) [ 486 0 R /XYZ 99.933071 723.384971 0 ] (cb11-57) [ 486 0 R /XYZ 99.933071 704.437950 0 ] (cb11-58) [ 486 0 R /XYZ 99.933071 685.490928 0 ] (cb11-59) [ 486 0 R /XYZ 99.933071 666.543907 0 ] (cb11-6) [ 427 0 R /XYZ 99.933071 245.905821 0 ] (cb11-60) [ 486 0 R /XYZ 99.933071 647.596885 0 ] (cb11-61) [ 486 0 R /XYZ 99.933071 628.649864 0 ] (cb11-7) [ 427 0 R /XYZ 99.933071 226.958799 0 ] (cb11-8) [ 427 0 R /XYZ 99.933071 208.011778 0 ] (cb11-9) [ 427 0 R /XYZ 99.933071 189.064756 0 ] (cb110) [ 631 0 R /XYZ 84.259843 387.020079 0 ] (cb110-1) [ 631 0 R /XYZ 101.433071 385.323057 0 ] (cb113) [ 636 0 R /XYZ 84.259843 611.570079 0 ] (cb113-1) [ 636 0 R /XYZ 101.433071 609.873057 0 ] (cb116) [ 639 0 R /XYZ 84.259843 169.520079 0 ] (cb116-1) [ 639 0 R /XYZ 101.433071 167.823057 0 ] (cb116-10) [ 645 0 R /XYZ 99.933071 666.543907 0 ] (cb116-11) [ 645 0 R /XYZ 99.933071 647.596885 0 ] (cb116-12) [ 645 0 R /XYZ 99.933071 628.649864 0 ] (cb116-13) [ 645 0 R /XYZ 99.933071 609.702842 0 ] (cb116-14) [ 645 0 R /XYZ 99.933071 590.755821 0 ] (cb116-15) [ 645 0 R /XYZ 99.933071 571.808799 0 ] (cb116-16) [ 645 0 R /XYZ 99.933071 552.861778 0 ] (cb116-17) [ 645 0 R /XYZ 99.933071 533.914756 0 ] (cb116-18) [ 645 0 R /XYZ 99.933071 514.967735 0 ] (cb116-19) [ 645 0 R /XYZ 99.933071 496.020714 0 ] (cb116-2) [ 639 0 R /XYZ 99.933071 148.876036 0 ] (cb116-20) [ 645 0 R /XYZ 99.933071 477.073692 0 ] (cb116-21) [ 645 0 R /XYZ 99.933071 458.126671 0 ] (cb116-22) [ 645 0 R /XYZ 99.933071 439.179649 0 ] (cb116-23) [ 645 0 R /XYZ 99.933071 420.232628 0 ] (cb116-24) [ 645 0 R /XYZ 99.933071 401.285606 0 ] (cb116-25) [ 645 0 R /XYZ 99.933071 382.338585 0 ] (cb116-3) [ 639 0 R /XYZ 99.933071 129.929014 0 ] (cb116-4) [ 639 0 R /XYZ 99.933071 92.034971 0 ] (cb116-5) [ 645 0 R /XYZ 99.933071 799.173057 0 ] (cb116-6) [ 645 0 R /XYZ 99.933071 780.226036 0 ] (cb116-7) [ 645 0 R /XYZ 99.933071 761.279014 0 ] (cb116-8) [ 645 0 R /XYZ 99.933071 742.331993 0 ] (cb116-9) [ 645 0 R /XYZ 99.933071 704.437950 0 ] (cb117) [ 645 0 R /XYZ 84.259843 323.088585 0 ] (cb117-1) [ 645 0 R /XYZ 101.433071 321.391563 0 ] (cb12) [ 486 0 R /XYZ 84.259843 569.399864 0 ] (cb12-1) [ 486 0 R /XYZ 101.433071 567.702842 0 ] (cb120) [ 669 0 R /XYZ 84.259843 655.370079 0 ] (cb120-1) [ 669 0 R /XYZ 101.433071 653.673057 0 ] (cb121) [ 672 0 R /XYZ 84.259843 530.991496 0 ] (cb121-1) [ 672 0 R /XYZ 101.433071 529.294475 0 ] (cb124) [ 675 0 R /XYZ 84.259843 715.370079 0 ] (cb124-1) [ 675 0 R /XYZ 101.433071 713.673057 0 ] (cb127) [ 675 0 R /XYZ 84.259843 157.323057 0 ] (cb127-1) [ 675 0 R /XYZ 101.433071 155.626036 0 ] (cb130) [ 679 0 R /XYZ 84.259843 306.020079 0 ] (cb130-1) [ 679 0 R /XYZ 101.433071 304.323057 0 ] (cb133) [ 682 0 R /XYZ 84.259843 458.270079 0 ] (cb133-1) [ 682 0 R /XYZ 101.433071 456.573057 0 ] (cb136) [ 685 0 R /XYZ 84.259843 433.970079 0 ] (cb136-1) [ 685 0 R /XYZ 101.433071 432.273057 0 ] (cb139) [ 690 0 R /XYZ 84.259843 560.991496 0 ] (cb139-1) [ 690 0 R /XYZ 101.433071 559.294475 0 ] (cb142) [ 690 0 R /XYZ 84.259843 205.444475 0 ] (cb142-1) [ 690 0 R /XYZ 101.433071 203.747453 0 ] (cb145) [ 696 0 R /XYZ 84.259843 509.991496 0 ] (cb145-1) [ 696 0 R /XYZ 101.433071 508.294475 0 ] (cb148) [ 701 0 R /XYZ 84.259843 379.520079 0 ] (cb148-1) [ 701 0 R /XYZ 101.433071 377.823057 0 ] (cb15) [ 486 0 R /XYZ 84.259843 221.352842 0 ] (cb15-1) [ 486 0 R /XYZ 101.433071 219.655821 0 ] (cb151) [ 706 0 R /XYZ 84.259843 248.270079 0 ] (cb151-1) [ 706 0 R /XYZ 101.433071 246.573057 0 ] (cb154) [ 713 0 R /XYZ 84.259843 799.370079 0 ] (cb154-1) [ 713 0 R /XYZ 101.433071 797.673057 0 ] (cb157) [ 718 0 R /XYZ 84.259843 641.570079 0 ] (cb157-1) [ 718 0 R /XYZ 101.433071 639.873057 0 ] (cb160) [ 723 0 R /XYZ 84.259843 492.020079 0 ] (cb160-1) [ 723 0 R /XYZ 101.433071 490.323057 0 ] (cb163) [ 728 0 R /XYZ 84.259843 327.020079 0 ] (cb163-1) [ 728 0 R /XYZ 101.433071 325.323057 0 ] (cb166) [ 737 0 R /XYZ 84.259843 590.991496 0 ] (cb166-1) [ 737 0 R /XYZ 101.433071 589.294475 0 ] (cb169) [ 742 0 R /XYZ 84.259843 238.791496 0 ] (cb169-1) [ 742 0 R /XYZ 101.433071 237.094475 0 ] (cb172) [ 745 0 R /XYZ 84.259843 576.020079 0 ] (cb172-1) [ 745 0 R /XYZ 101.433071 574.323057 0 ] (cb174) [ 745 0 R /XYZ 84.259843 247.079014 0 ] (cb174-1) [ 745 0 R /XYZ 101.433071 245.381993 0 ] (cb176) [ 749 0 R /XYZ 84.259843 641.570079 0 ] (cb176-1) [ 749 0 R /XYZ 101.433071 639.873057 0 ] (cb179) [ 749 0 R /XYZ 84.259843 281.879014 0 ] (cb179-1) [ 749 0 R /XYZ 101.433071 280.181993 0 ] (cb179-2) [ 749 0 R /XYZ 99.933071 261.234971 0 ] (cb179-3) [ 749 0 R /XYZ 99.933071 242.287950 0 ] (cb179-4) [ 749 0 R /XYZ 99.933071 185.446885 0 ] (cb179-5) [ 749 0 R /XYZ 99.933071 166.499864 0 ] (cb18) [ 499 0 R /XYZ 84.259843 569.570079 0 ] (cb18-1) [ 499 0 R /XYZ 101.433071 567.873057 0 ] (cb180) [ 749 0 R /XYZ 84.259843 107.249864 0 ] (cb180-1) [ 749 0 R /XYZ 101.433071 105.552842 0 ] (cb182) [ 758 0 R /XYZ 84.259843 587.270079 0 ] (cb182-1) [ 758 0 R /XYZ 101.433071 585.573057 0 ] (cb182-2) [ 758 0 R /XYZ 99.933071 566.626036 0 ] (cb182-3) [ 758 0 R /XYZ 99.933071 547.679014 0 ] (cb182-4) [ 758 0 R /XYZ 99.933071 490.837950 0 ] (cb182-5) [ 758 0 R /XYZ 99.933071 471.890928 0 ] (cb183) [ 758 0 R /XYZ 84.259843 412.640928 0 ] (cb183-1) [ 758 0 R /XYZ 101.433071 410.943907 0 ] (cb185) [ 768 0 R /XYZ 84.259843 485.991496 0 ] (cb185-1) [ 768 0 R /XYZ 101.433071 484.294475 0 ] (cb186) [ 768 0 R /XYZ 84.259843 425.044475 0 ] (cb186-1) [ 768 0 R /XYZ 101.433071 423.347453 0 ] (cb188) [ 768 0 R /XYZ 84.259843 107.747453 0 ] (cb188-1) [ 768 0 R /XYZ 101.433071 106.050432 0 ] (cb189) [ 773 0 R /XYZ 84.259843 772.370079 0 ] (cb189-1) [ 773 0 R /XYZ 101.433071 770.673057 0 ] (cb191) [ 773 0 R /XYZ 84.259843 455.073057 0 ] (cb191-1) [ 773 0 R /XYZ 101.433071 453.376036 0 ] (cb192) [ 773 0 R /XYZ 84.259843 394.126036 0 ] (cb192-1) [ 773 0 R /XYZ 101.433071 392.429014 0 ] (cb194) [ 778 0 R /XYZ 84.259843 799.370079 0 ] (cb194-1) [ 778 0 R /XYZ 101.433071 797.673057 0 ] (cb195) [ 778 0 R /XYZ 84.259843 738.423057 0 ] (cb195-1) [ 778 0 R /XYZ 101.433071 736.726036 0 ] (cb197) [ 778 0 R /XYZ 84.259843 406.126036 0 ] (cb197-1) [ 778 0 R /XYZ 101.433071 404.429014 0 ] (cb198) [ 778 0 R /XYZ 84.259843 345.179014 0 ] (cb198-1) [ 778 0 R /XYZ 101.433071 343.481993 0 ] (cb2) [ 311 0 R /XYZ 84.259843 617.823057 0 ] (cb2-1) [ 311 0 R /XYZ 101.433071 616.126036 0 ] (cb201) [ 784 0 R /XYZ 84.259843 225.770079 0 ] (cb201-1) [ 784 0 R /XYZ 101.433071 224.073057 0 ] (cb202) [ 784 0 R /XYZ 84.259843 164.823057 0 ] (cb202-1) [ 784 0 R /XYZ 101.433071 163.126036 0 ] (cb204) [ 788 0 R /XYZ 84.259843 581.570079 0 ] (cb204-1) [ 788 0 R /XYZ 101.433071 579.873057 0 ] (cb205) [ 788 0 R /XYZ 84.259843 520.623057 0 ] (cb205-1) [ 788 0 R /XYZ 101.433071 518.926036 0 ] (cb207) [ 792 0 R /XYZ 84.259843 685.370079 0 ] (cb207-1) [ 792 0 R /XYZ 101.433071 683.673057 0 ] (cb208) [ 792 0 R /XYZ 84.259843 624.423057 0 ] (cb208-1) [ 792 0 R /XYZ 101.433071 622.726036 0 ] (cb21) [ 502 0 R /XYZ 84.259843 560.991496 0 ] (cb21-1) [ 502 0 R /XYZ 101.433071 559.294475 0 ] (cb210) [ 792 0 R /XYZ 84.259843 262.126036 0 ] (cb210-1) [ 792 0 R /XYZ 101.433071 260.429014 0 ] (cb211) [ 792 0 R /XYZ 84.259843 201.179014 0 ] (cb211-1) [ 792 0 R /XYZ 101.433071 199.481993 0 ] (cb213) [ 798 0 R /XYZ 84.259843 566.570079 0 ] (cb213-1) [ 798 0 R /XYZ 101.433071 564.873057 0 ] (cb214) [ 798 0 R /XYZ 84.259843 505.623057 0 ] (cb214-1) [ 798 0 R /XYZ 101.433071 503.926036 0 ] (cb217) [ 802 0 R /XYZ 84.259843 333.770079 0 ] (cb217-1) [ 802 0 R /XYZ 101.433071 332.073057 0 ] (cb218) [ 805 0 R /XYZ 84.259843 772.370079 0 ] (cb218-1) [ 805 0 R /XYZ 101.433071 770.673057 0 ] (cb219) [ 805 0 R /XYZ 84.259843 711.423057 0 ] (cb219-1) [ 805 0 R /XYZ 101.433071 709.726036 0 ] (cb221) [ 811 0 R /XYZ 84.259843 726.620079 0 ] (cb221-1) [ 811 0 R /XYZ 101.433071 724.923057 0 ] (cb221-10) [ 811 0 R /XYZ 99.933071 554.399864 0 ] (cb221-11) [ 811 0 R /XYZ 99.933071 535.452842 0 ] (cb221-12) [ 811 0 R /XYZ 99.933071 440.717735 0 ] (cb221-13) [ 811 0 R /XYZ 99.933071 421.770714 0 ] (cb221-14) [ 811 0 R /XYZ 99.933071 402.823692 0 ] (cb221-15) [ 811 0 R /XYZ 99.933071 383.876671 0 ] (cb221-16) [ 811 0 R /XYZ 99.933071 364.929649 0 ] (cb221-17) [ 811 0 R /XYZ 99.933071 345.982628 0 ] (cb221-18) [ 811 0 R /XYZ 99.933071 308.088585 0 ] (cb221-19) [ 811 0 R /XYZ 99.933071 289.141563 0 ] (cb221-2) [ 811 0 R /XYZ 99.933071 705.976036 0 ] (cb221-20) [ 811 0 R /XYZ 99.933071 156.512413 0 ] (cb221-21) [ 811 0 R /XYZ 99.933071 137.565391 0 ] (cb221-22) [ 811 0 R /XYZ 99.933071 118.618370 0 ] (cb221-23) [ 835 0 R /XYZ 99.933071 780.226036 0 ] (cb221-24) [ 835 0 R /XYZ 99.933071 761.279014 0 ] (cb221-25) [ 835 0 R /XYZ 99.933071 742.331993 0 ] (cb221-26) [ 835 0 R /XYZ 99.933071 723.384971 0 ] (cb221-27) [ 835 0 R /XYZ 99.933071 704.437950 0 ] (cb221-28) [ 835 0 R /XYZ 99.933071 685.490928 0 ] (cb221-29) [ 835 0 R /XYZ 99.933071 666.543907 0 ] (cb221-3) [ 811 0 R /XYZ 99.933071 687.029014 0 ] (cb221-30) [ 835 0 R /XYZ 99.933071 647.596885 0 ] (cb221-31) [ 835 0 R /XYZ 99.933071 628.649864 0 ] (cb221-4) [ 811 0 R /XYZ 99.933071 668.081993 0 ] (cb221-5) [ 811 0 R /XYZ 99.933071 649.134971 0 ] (cb221-6) [ 811 0 R /XYZ 99.933071 630.187950 0 ] (cb221-7) [ 811 0 R /XYZ 99.933071 611.240928 0 ] (cb221-8) [ 811 0 R /XYZ 99.933071 592.293907 0 ] (cb221-9) [ 811 0 R /XYZ 99.933071 573.346885 0 ] (cb222) [ 835 0 R /XYZ 84.259843 569.399864 0 ] (cb222-1) [ 835 0 R /XYZ 101.433071 567.702842 0 ] (cb225) [ 847 0 R /XYZ 84.259843 410.391496 0 ] (cb225-1) [ 847 0 R /XYZ 101.433071 408.694475 0 ] (cb228) [ 850 0 R /XYZ 84.259843 772.370079 0 ] (cb228-1) [ 850 0 R /XYZ 101.433071 770.673057 0 ] (cb231) [ 850 0 R /XYZ 84.259843 401.429014 0 ] (cb231-1) [ 850 0 R /XYZ 101.433071 399.731993 0 ] (cb234) [ 854 0 R /XYZ 84.259843 772.370079 0 ] (cb234-1) [ 854 0 R /XYZ 101.433071 770.673057 0 ] (cb237) [ 859 0 R /XYZ 84.259843 385.641496 0 ] (cb237-1) [ 859 0 R /XYZ 101.433071 383.944475 0 ] (cb237-10) [ 859 0 R /XYZ 99.933071 213.421281 0 ] (cb237-11) [ 859 0 R /XYZ 99.933071 194.474260 0 ] (cb237-12) [ 859 0 R /XYZ 99.933071 156.580217 0 ] (cb237-13) [ 859 0 R /XYZ 99.933071 118.686174 0 ] (cb237-14) [ 859 0 R /XYZ 99.933071 99.739152 0 ] (cb237-15) [ 875 0 R /XYZ 99.933071 799.173057 0 ] (cb237-16) [ 875 0 R /XYZ 99.933071 780.226036 0 ] (cb237-17) [ 875 0 R /XYZ 99.933071 761.279014 0 ] (cb237-18) [ 875 0 R /XYZ 99.933071 742.331993 0 ] (cb237-19) [ 875 0 R /XYZ 99.933071 723.384971 0 ] (cb237-2) [ 859 0 R /XYZ 99.933071 364.997453 0 ] (cb237-3) [ 859 0 R /XYZ 99.933071 346.050432 0 ] (cb237-4) [ 859 0 R /XYZ 99.933071 327.103410 0 ] (cb237-5) [ 859 0 R /XYZ 99.933071 308.156389 0 ] (cb237-6) [ 859 0 R /XYZ 99.933071 289.209367 0 ] (cb237-7) [ 859 0 R /XYZ 99.933071 270.262346 0 ] (cb237-8) [ 859 0 R /XYZ 99.933071 251.315324 0 ] (cb237-9) [ 859 0 R /XYZ 99.933071 232.368303 0 ] (cb238) [ 875 0 R /XYZ 84.259843 664.134971 0 ] (cb238-1) [ 875 0 R /XYZ 101.433071 662.437950 0 ] (cb24) [ 505 0 R /XYZ 84.259843 102.020079 0 ] (cb24-1) [ 505 0 R /XYZ 101.433071 100.323057 0 ] (cb241) [ 889 0 R /XYZ 84.259843 711.620079 0 ] (cb241-1) [ 889 0 R /XYZ 101.433071 709.923057 0 ] (cb241-10) [ 889 0 R /XYZ 99.933071 539.399864 0 ] (cb241-11) [ 889 0 R /XYZ 99.933071 520.452842 0 ] (cb241-12) [ 889 0 R /XYZ 99.933071 463.611778 0 ] (cb241-13) [ 889 0 R /XYZ 99.933071 444.664756 0 ] (cb241-14) [ 889 0 R /XYZ 99.933071 425.717735 0 ] (cb241-15) [ 889 0 R /XYZ 99.933071 406.770714 0 ] (cb241-16) [ 889 0 R /XYZ 99.933071 387.823692 0 ] (cb241-17) [ 889 0 R /XYZ 99.933071 368.876671 0 ] (cb241-18) [ 889 0 R /XYZ 99.933071 349.929649 0 ] (cb241-2) [ 889 0 R /XYZ 99.933071 690.976036 0 ] (cb241-3) [ 889 0 R /XYZ 99.933071 672.029014 0 ] (cb241-4) [ 889 0 R /XYZ 99.933071 653.081993 0 ] (cb241-5) [ 889 0 R /XYZ 99.933071 634.134971 0 ] (cb241-6) [ 889 0 R /XYZ 99.933071 615.187950 0 ] (cb241-7) [ 889 0 R /XYZ 99.933071 596.240928 0 ] (cb241-8) [ 889 0 R /XYZ 99.933071 577.293907 0 ] (cb241-9) [ 889 0 R /XYZ 99.933071 558.346885 0 ] (cb242) [ 889 0 R /XYZ 84.259843 290.679649 0 ] (cb242-1) [ 889 0 R /XYZ 101.433071 288.982628 0 ] (cb27) [ 510 0 R /XYZ 84.259843 383.270079 0 ] (cb27-1) [ 510 0 R /XYZ 101.433071 381.573057 0 ] (cb3) [ 315 0 R /XYZ 84.259843 351.620079 0 ] (cb3-1) [ 315 0 R /XYZ 101.433071 349.923057 0 ] (cb3-10) [ 315 0 R /XYZ 99.933071 160.452842 0 ] (cb3-11) [ 315 0 R /XYZ 99.933071 141.505821 0 ] (cb3-12) [ 315 0 R /XYZ 99.933071 122.558799 0 ] (cb3-13) [ 315 0 R /XYZ 99.933071 103.611778 0 ] (cb3-14) [ 330 0 R /XYZ 99.933071 799.173057 0 ] (cb3-15) [ 330 0 R /XYZ 99.933071 780.226036 0 ] (cb3-16) [ 330 0 R /XYZ 99.933071 761.279014 0 ] (cb3-17) [ 330 0 R /XYZ 99.933071 742.331993 0 ] (cb3-18) [ 330 0 R /XYZ 99.933071 723.384971 0 ] (cb3-19) [ 330 0 R /XYZ 99.933071 704.437950 0 ] (cb3-2) [ 315 0 R /XYZ 99.933071 330.976036 0 ] (cb3-20) [ 330 0 R /XYZ 99.933071 685.490928 0 ] (cb3-21) [ 330 0 R /XYZ 99.933071 666.543907 0 ] (cb3-22) [ 330 0 R /XYZ 99.933071 647.596885 0 ] (cb3-23) [ 330 0 R /XYZ 99.933071 628.649864 0 ] (cb3-24) [ 330 0 R /XYZ 99.933071 609.702842 0 ] (cb3-25) [ 330 0 R /XYZ 99.933071 590.755821 0 ] (cb3-26) [ 330 0 R /XYZ 99.933071 571.808799 0 ] (cb3-27) [ 330 0 R /XYZ 99.933071 552.861778 0 ] (cb3-28) [ 330 0 R /XYZ 99.933071 533.914756 0 ] (cb3-29) [ 330 0 R /XYZ 99.933071 514.967735 0 ] (cb3-3) [ 315 0 R /XYZ 99.933071 312.029014 0 ] (cb3-30) [ 330 0 R /XYZ 99.933071 496.020714 0 ] (cb3-31) [ 330 0 R /XYZ 99.933071 477.073692 0 ] (cb3-32) [ 330 0 R /XYZ 99.933071 458.126671 0 ] (cb3-33) [ 330 0 R /XYZ 99.933071 439.179649 0 ] (cb3-34) [ 330 0 R /XYZ 99.933071 420.232628 0 ] (cb3-35) [ 330 0 R /XYZ 99.933071 401.285606 0 ] (cb3-36) [ 330 0 R /XYZ 99.933071 382.338585 0 ] (cb3-37) [ 330 0 R /XYZ 99.933071 363.391563 0 ] (cb3-38) [ 330 0 R /XYZ 99.933071 344.444542 0 ] (cb3-39) [ 330 0 R /XYZ 99.933071 325.497520 0 ] (cb3-4) [ 315 0 R /XYZ 99.933071 274.134971 0 ] (cb3-40) [ 330 0 R /XYZ 99.933071 306.550499 0 ] (cb3-41) [ 330 0 R /XYZ 99.933071 287.603477 0 ] (cb3-42) [ 330 0 R /XYZ 99.933071 268.656456 0 ] (cb3-43) [ 330 0 R /XYZ 99.933071 249.709434 0 ] (cb3-44) [ 330 0 R /XYZ 99.933071 230.762413 0 ] (cb3-5) [ 315 0 R /XYZ 99.933071 255.187950 0 ] (cb3-6) [ 315 0 R /XYZ 99.933071 236.240928 0 ] (cb3-7) [ 315 0 R /XYZ 99.933071 217.293907 0 ] (cb3-8) [ 315 0 R /XYZ 99.933071 198.346885 0 ] (cb3-9) [ 315 0 R /XYZ 99.933071 179.399864 0 ] (cb30) [ 515 0 R /XYZ 84.259843 641.570079 0 ] (cb30-1) [ 515 0 R /XYZ 101.433071 639.873057 0 ] (cb33) [ 518 0 R /XYZ 84.259843 113.270079 0 ] (cb33-1) [ 518 0 R /XYZ 101.433071 111.573057 0 ] (cb36) [ 523 0 R /XYZ 84.259843 334.520079 0 ] (cb36-1) [ 523 0 R /XYZ 101.433071 332.823057 0 ] (cb39) [ 528 0 R /XYZ 84.259843 570.770079 0 ] (cb39-1) [ 528 0 R /XYZ 101.433071 569.073057 0 ] (cb4) [ 330 0 R /XYZ 84.259843 171.512413 0 ] (cb4-1) [ 330 0 R /XYZ 101.433071 169.815391 0 ] (cb42) [ 531 0 R /XYZ 84.259843 120.770079 0 ] (cb42-1) [ 531 0 R /XYZ 101.433071 119.073057 0 ] (cb45) [ 536 0 R /XYZ 84.259843 402.020079 0 ] (cb45-1) [ 536 0 R /XYZ 101.433071 400.323057 0 ] (cb48) [ 541 0 R /XYZ 84.259843 611.570079 0 ] (cb48-1) [ 541 0 R /XYZ 101.433071 609.873057 0 ] (cb51) [ 546 0 R /XYZ 84.259843 799.370079 0 ] (cb51-1) [ 546 0 R /XYZ 101.433071 797.673057 0 ] (cb54) [ 549 0 R /XYZ 84.259843 252.020079 0 ] (cb54-1) [ 549 0 R /XYZ 101.433071 250.323057 0 ] (cb55) [ 552 0 R /XYZ 84.259843 730.370079 0 ] (cb55-1) [ 552 0 R /XYZ 101.433071 728.673057 0 ] (cb56) [ 552 0 R /XYZ 84.259843 503.823057 0 ] (cb56-1) [ 552 0 R /XYZ 101.433071 502.126036 0 ] (cb59) [ 558 0 R /XYZ 84.259843 730.370079 0 ] (cb59-1) [ 558 0 R /XYZ 101.433071 728.673057 0 ] (cb62) [ 561 0 R /XYZ 84.259843 222.020079 0 ] (cb62-1) [ 561 0 R /XYZ 101.433071 220.323057 0 ] (cb65) [ 566 0 R /XYZ 84.259843 353.270079 0 ] (cb65-1) [ 566 0 R /XYZ 101.433071 351.573057 0 ] (cb68) [ 571 0 R /XYZ 84.259843 548.270079 0 ] (cb68-1) [ 571 0 R /XYZ 101.433071 546.573057 0 ] (cb7) [ 364 0 R /XYZ 84.259843 557.270079 0 ] (cb7-1) [ 364 0 R /XYZ 101.433071 555.573057 0 ] (cb7-10) [ 364 0 R /XYZ 99.933071 347.155821 0 ] (cb7-11) [ 364 0 R /XYZ 99.933071 328.208799 0 ] (cb7-12) [ 364 0 R /XYZ 99.933071 309.261778 0 ] (cb7-13) [ 364 0 R /XYZ 99.933071 290.314756 0 ] (cb7-14) [ 364 0 R /XYZ 99.933071 271.367735 0 ] (cb7-15) [ 364 0 R /XYZ 99.933071 252.420714 0 ] (cb7-16) [ 364 0 R /XYZ 99.933071 233.473692 0 ] (cb7-17) [ 364 0 R /XYZ 99.933071 214.526671 0 ] (cb7-18) [ 364 0 R /XYZ 99.933071 195.579649 0 ] (cb7-19) [ 364 0 R /XYZ 99.933071 176.632628 0 ] (cb7-2) [ 364 0 R /XYZ 99.933071 536.626036 0 ] (cb7-20) [ 364 0 R /XYZ 99.933071 157.685606 0 ] (cb7-21) [ 364 0 R /XYZ 99.933071 138.738585 0 ] (cb7-22) [ 364 0 R /XYZ 99.933071 119.791563 0 ] (cb7-23) [ 364 0 R /XYZ 99.933071 100.844542 0 ] (cb7-24) [ 389 0 R /XYZ 99.933071 799.173057 0 ] (cb7-25) [ 389 0 R /XYZ 99.933071 780.226036 0 ] (cb7-26) [ 389 0 R /XYZ 99.933071 761.279014 0 ] (cb7-27) [ 389 0 R /XYZ 99.933071 742.331993 0 ] (cb7-28) [ 389 0 R /XYZ 99.933071 723.384971 0 ] (cb7-29) [ 389 0 R /XYZ 99.933071 704.437950 0 ] (cb7-3) [ 364 0 R /XYZ 99.933071 517.679014 0 ] (cb7-30) [ 389 0 R /XYZ 99.933071 685.490928 0 ] (cb7-31) [ 389 0 R /XYZ 99.933071 666.543907 0 ] (cb7-32) [ 389 0 R /XYZ 99.933071 647.596885 0 ] (cb7-33) [ 389 0 R /XYZ 99.933071 628.649864 0 ] (cb7-34) [ 389 0 R /XYZ 99.933071 609.702842 0 ] (cb7-35) [ 389 0 R /XYZ 99.933071 590.755821 0 ] (cb7-36) [ 389 0 R /XYZ 99.933071 571.808799 0 ] (cb7-37) [ 389 0 R /XYZ 99.933071 552.861778 0 ] (cb7-38) [ 389 0 R /XYZ 99.933071 533.914756 0 ] (cb7-39) [ 389 0 R /XYZ 99.933071 514.967735 0 ] (cb7-4) [ 364 0 R /XYZ 99.933071 479.784971 0 ] (cb7-40) [ 389 0 R /XYZ 99.933071 496.020714 0 ] (cb7-41) [ 389 0 R /XYZ 99.933071 477.073692 0 ] (cb7-42) [ 389 0 R /XYZ 99.933071 458.126671 0 ] (cb7-43) [ 389 0 R /XYZ 99.933071 439.179649 0 ] (cb7-44) [ 389 0 R /XYZ 99.933071 420.232628 0 ] (cb7-45) [ 389 0 R /XYZ 99.933071 401.285606 0 ] (cb7-46) [ 389 0 R /XYZ 99.933071 382.338585 0 ] (cb7-47) [ 389 0 R /XYZ 99.933071 363.391563 0 ] (cb7-48) [ 389 0 R /XYZ 99.933071 344.444542 0 ] (cb7-49) [ 389 0 R /XYZ 99.933071 325.497520 0 ] (cb7-5) [ 364 0 R /XYZ 99.933071 441.890928 0 ] (cb7-50) [ 389 0 R /XYZ 99.933071 306.550499 0 ] (cb7-51) [ 389 0 R /XYZ 99.933071 287.603477 0 ] (cb7-52) [ 389 0 R /XYZ 99.933071 268.656456 0 ] (cb7-53) [ 389 0 R /XYZ 99.933071 230.762413 0 ] (cb7-54) [ 389 0 R /XYZ 99.933071 211.815391 0 ] (cb7-55) [ 389 0 R /XYZ 99.933071 192.868370 0 ] (cb7-56) [ 389 0 R /XYZ 99.933071 173.921348 0 ] (cb7-57) [ 389 0 R /XYZ 99.933071 154.974327 0 ] (cb7-58) [ 389 0 R /XYZ 99.933071 136.027305 0 ] (cb7-59) [ 389 0 R /XYZ 99.933071 117.080284 0 ] (cb7-6) [ 364 0 R /XYZ 99.933071 422.943907 0 ] (cb7-60) [ 427 0 R /XYZ 99.933071 799.173057 0 ] (cb7-61) [ 427 0 R /XYZ 99.933071 780.226036 0 ] (cb7-7) [ 364 0 R /XYZ 99.933071 403.996885 0 ] (cb7-8) [ 364 0 R /XYZ 99.933071 385.049864 0 ] (cb7-9) [ 364 0 R /XYZ 99.933071 366.102842 0 ] (cb71) [ 574 0 R /XYZ 84.259843 98.270079 0 ] (cb71-1) [ 574 0 R /XYZ 101.433071 96.573057 0 ] (cb74) [ 579 0 R /XYZ 84.259843 383.270079 0 ] (cb74-1) [ 579 0 R /XYZ 101.433071 381.573057 0 ] (cb77) [ 584 0 R /XYZ 84.259843 641.570079 0 ] (cb77-1) [ 584 0 R /XYZ 101.433071 639.873057 0 ] (cb8) [ 427 0 R /XYZ 84.259843 720.976036 0 ] (cb8-1) [ 427 0 R /XYZ 101.433071 719.279014 0 ] (cb80) [ 587 0 R /XYZ 84.259843 162.020079 0 ] (cb80-1) [ 587 0 R /XYZ 101.433071 160.323057 0 ] (cb83) [ 592 0 R /XYZ 84.259843 424.520079 0 ] (cb83-1) [ 592 0 R /XYZ 101.433071 422.823057 0 ] (cb86) [ 597 0 R /XYZ 84.259843 611.570079 0 ] (cb86-1) [ 597 0 R /XYZ 101.433071 609.873057 0 ] (cb89) [ 600 0 R /XYZ 84.259843 143.270079 0 ] (cb89-1) [ 600 0 R /XYZ 101.433071 141.573057 0 ] (cb92) [ 605 0 R /XYZ 84.259843 417.020079 0 ] (cb92-1) [ 605 0 R /XYZ 101.433071 415.323057 0 ] (cb95) [ 610 0 R /XYZ 84.259843 611.570079 0 ] (cb95-1) [ 610 0 R /XYZ 101.433071 609.873057 0 ] (cb98) [ 613 0 R /XYZ 84.259843 139.520079 0 ] (cb98-1) [ 613 0 R /XYZ 101.433071 137.823057 0 ] (cis-v1.6-kubernetes-benchmark---rancher-v2.6-with-kubernetes-v1.18-to-v1.21) [ 298 0 R /XYZ 84.259843 782.570079 0 ] (client-certificate-authentication-should-not-be-used-for-users-manual) [ 735 0 R /XYZ 84.259843 682.791496 0 ] (configure-image-provenance-using-imagepolicywebhook-admission-controller-manual) [ 885 0 R /XYZ 84.259843 682.791496 0 ] (consider-external-secret-storage-manual) [ 883 0 R /XYZ 84.259843 562.191496 0 ] (contentsbox) [ 8 0 R /XYZ 77.509843 756.850394 0 ] (controller-manager) [ 672 0 R /XYZ 41.740157 784.430079 0 ] (controls) [ 303 0 R /XYZ 84.259843 609.981496 0 ] (create-administrative-boundaries-between-resources-using-namespaces-manual) [ 887 0 R /XYZ 84.259843 718.791496 0 ] (ensure-that-a-minimal-audit-policy-is-created-automated) [ 737 0 R /XYZ 84.259843 718.791496 0 ] (ensure-that-a-unique-certificate-authority-is-used-for-etcd-automated) [ 728 0 R /XYZ 84.259843 499.820079 0 ] (ensure-that-all-namespaces-have-network-policies-defined-automated) [ 859 0 R /XYZ 84.259843 532.191496 0 ] (ensure-that-default-service-accounts-are-not-actively-used.-automated) [ 809 0 R /XYZ 84.259843 185.391496 0 ] (ensure-that-encryption-providers-are-appropriately-configured-automated) [ 639 0 R /XYZ 84.259843 331.070079 0 ] (ensure-that-service-account-tokens-are-only-mounted-where-necessary-manual) [ 835 0 R /XYZ 84.259843 409.152842 0 ] (ensure-that-the---anonymous-auth-argument-is-set-to-false-automated) [ 502 0 R /XYZ 84.259843 718.791496 0 ] (ensure-that-the---audit-log-maxage-argument-is-set-to-30-or-as-appropriate-automated) [ 592 0 R /XYZ 84.259843 612.320079 0 ] (ensure-that-the---audit-log-maxbackup-argument-is-set-to-10-or-as-appropriate-automated) [ 597 0 R /XYZ 84.259843 799.370079 0 ] (ensure-that-the---audit-log-maxsize-argument-is-set-to-100-or-as-appropriate-automated) [ 600 0 R /XYZ 84.259843 331.070079 0 ] (ensure-that-the---audit-log-path-argument-is-set-automated) [ 587 0 R /XYZ 84.259843 349.820079 0 ] (ensure-that-the---authorization-mode-argument-includes-node-automated) [ 531 0 R /XYZ 84.259843 293.570079 0 ] (ensure-that-the---authorization-mode-argument-includes-rbac-automated) [ 536 0 R /XYZ 84.259843 574.820079 0 ] (ensure-that-the---authorization-mode-argument-is-not-set-to-alwaysallow-automated) [ 528 0 R /XYZ 84.259843 743.570079 0 ] (ensure-that-the---authorization-mode-argument-is-not-set-to-alwaysallow-automated-1) [ 768 0 R /XYZ 84.259843 325.547453 0 ] (ensure-that-the---auto-tls-argument-is-not-set-to-true-automated) [ 706 0 R /XYZ 84.259843 406.070079 0 ] (ensure-that-the---basic-auth-file-argument-is-not-set-automated) [ 505 0 R /XYZ 84.259843 274.820079 0 ] (ensure-that-the---bind-address-argument-is-set-to-127.0.0.1-automated) [ 685 0 R /XYZ 84.259843 591.770079 0 ] (ensure-that-the---bind-address-argument-is-set-to-127.0.0.1-automated-1) [ 690 0 R /XYZ 84.259843 363.244475 0 ] (ensure-that-the---cert-file-and---key-file-arguments-are-set-as-appropriate-automated) [ 696 0 R /XYZ 84.259843 682.791496 0 ] (ensure-that-the---client-ca-file-argument-is-set-as-appropriate-automated) [ 626 0 R /XYZ 84.259843 293.570079 0 ] (ensure-that-the---client-ca-file-argument-is-set-as-appropriate-automated-1) [ 773 0 R /XYZ 84.259843 672.873057 0 ] (ensure-that-the---client-cert-auth-argument-is-set-to-true-automated) [ 701 0 R /XYZ 84.259843 537.320079 0 ] (ensure-that-the---encryption-provider-config-argument-is-set-as-appropriate-automated) [ 636 0 R /XYZ 84.259843 799.370079 0 ] (ensure-that-the---etcd-cafile-argument-is-set-as-appropriate-automated) [ 631 0 R /XYZ 84.259843 574.820079 0 ] (ensure-that-the---etcd-certfile-and---etcd-keyfile-arguments-are-set-as-appropriate-automated) [ 618 0 R /XYZ 84.259843 574.820079 0 ] (ensure-that-the---event-qps-argument-is-set-to-0-or-a-level-which-ensures-appropriate-event-capture-automated) [ 788 0 R /XYZ 84.259843 198.526036 0 ] (ensure-that-the---hostname-override-argument-is-not-set-manual) [ 788 0 R /XYZ 84.259843 421.126036 0 ] (ensure-that-the---insecure-bind-address-argument-is-not-set-automated) [ 571 0 R /XYZ 84.259843 706.070079 0 ] (ensure-that-the---insecure-port-argument-is-set-to-0-automated) [ 574 0 R /XYZ 84.259843 256.070079 0 ] (ensure-that-the---kubeconfig-kubelet.conf-file-ownership-is-set-to-rootroot-automated) [ 749 0 R /XYZ 84.259843 799.370079 0 ] (ensure-that-the---kubeconfig-kubelet.conf-file-permissions-are-set-to-644-or-more-restrictive-automated) [ 745 0 R /XYZ 84.259843 419.879014 0 ] (ensure-that-the---kubelet-certificate-authority-argument-is-set-as-appropriate-automated) [ 523 0 R /XYZ 84.259843 537.320079 0 ] (ensure-that-the---kubelet-client-certificate-and---kubelet-client-key-arguments-are-set-as-appropriate-automated) [ 518 0 R /XYZ 84.259843 331.070079 0 ] (ensure-that-the---kubelet-https-argument-is-set-to-true-automated) [ 515 0 R /XYZ 84.259843 799.370079 0 ] (ensure-that-the---make-iptables-util-chains-argument-is-set-to-true-automated) [ 788 0 R /XYZ 84.259843 799.370079 0 ] (ensure-that-the---peer-auto-tls-argument-is-not-set-to-true-automated) [ 723 0 R /XYZ 84.259843 649.820079 0 ] (ensure-that-the---peer-cert-file-and---peer-key-file-arguments-are-set-as-appropriate-automated) [ 711 0 R /XYZ 84.259843 274.820079 0 ] (ensure-that-the---peer-client-cert-auth-argument-is-set-to-true-automated) [ 718 0 R /XYZ 84.259843 799.370079 0 ] (ensure-that-the---profiling-argument-is-set-to-false-automated) [ 584 0 R /XYZ 84.259843 799.370079 0 ] (ensure-that-the---profiling-argument-is-set-to-false-automated-1) [ 672 0 R /XYZ 84.259843 145.744475 0 ] (ensure-that-the---profiling-argument-is-set-to-false-automated-2) [ 690 0 R /XYZ 84.259843 718.791496 0 ] (ensure-that-the---protect-kernel-defaults-argument-is-set-to-true-automated) [ 784 0 R /XYZ 84.259843 443.570079 0 ] (ensure-that-the---read-only-port-argument-is-set-to-0-automated) [ 773 0 R /XYZ 84.259843 294.629014 0 ] (ensure-that-the---request-timeout-argument-is-set-as-appropriate-automated) [ 605 0 R /XYZ 84.259843 574.820079 0 ] (ensure-that-the---root-ca-file-argument-is-set-as-appropriate-automated) [ 682 0 R /XYZ 84.259843 631.070079 0 ] (ensure-that-the---rotate-certificates-argument-is-not-set-to-false-automated) [ 798 0 R /XYZ 84.259843 799.370079 0 ] (ensure-that-the---secure-port-argument-is-not-set-to-0-automated) [ 579 0 R /XYZ 84.259843 556.070079 0 ] (ensure-that-the---service-account-key-file-argument-is-set-as-appropriate-automated) [ 613 0 R /XYZ 84.259843 312.320079 0 ] (ensure-that-the---service-account-lookup-argument-is-set-to-true-automated) [ 610 0 R /XYZ 84.259843 799.370079 0 ] (ensure-that-the---service-account-private-key-file-argument-is-set-as-appropriate-automated) [ 679 0 R /XYZ 84.259843 508.820079 0 ] (ensure-that-the---streaming-connection-idle-timeout-argument-is-not-set-to-0-automated) [ 778 0 R /XYZ 84.259843 638.926036 0 ] (ensure-that-the---terminated-pod-gc-threshold-argument-is-set-as-appropriate-automated) [ 672 0 R /XYZ 84.259843 718.791496 0 ] (ensure-that-the---tls-cert-file-and---tls-private-key-file-arguments-are-set-as-appropriate-automated) [ 623 0 R /XYZ 84.259843 799.370079 0 ] (ensure-that-the---tls-cert-file-and---tls-private-key-file-arguments-are-set-as-appropriate-automated-1) [ 792 0 R /XYZ 84.259843 524.926036 0 ] (ensure-that-the---token-auth-file-parameter-is-not-set-automated) [ 510 0 R /XYZ 84.259843 556.070079 0 ] (ensure-that-the---use-service-account-credentials-argument-is-set-to-true-automated) [ 675 0 R /XYZ 84.259843 330.123057 0 ] (ensure-that-the-admin.conf-file-ownership-is-set-to-rootroot-automated) [ 311 0 R /XYZ 84.259843 458.476036 0 ] (ensure-that-the-admin.conf-file-permissions-are-set-to-644-or-more-restrictive-automated) [ 311 0 R /XYZ 84.259843 579.076036 0 ] (ensure-that-the-admission-control-plugin-alwaysadmit-is-not-set-automated) [ 544 0 R /XYZ 84.259843 256.070079 0 ] (ensure-that-the-admission-control-plugin-alwayspullimages-is-set-manual) [ 549 0 R /XYZ 84.259843 424.820079 0 ] (ensure-that-the-admission-control-plugin-eventratelimit-is-set-automated) [ 541 0 R /XYZ 84.259843 799.370079 0 ] (ensure-that-the-admission-control-plugin-namespacelifecycle-is-set-automated) [ 556 0 R /XYZ 84.259843 199.820079 0 ] (ensure-that-the-admission-control-plugin-noderestriction-is-set-automated) [ 566 0 R /XYZ 84.259843 556.070079 0 ] (ensure-that-the-admission-control-plugin-podsecuritypolicy-is-set-automated) [ 561 0 R /XYZ 84.259843 424.820079 0 ] (ensure-that-the-admission-control-plugin-securitycontextdeny-is-set-if-podsecuritypolicy-is-not-used-manual) [ 549 0 R /XYZ 84.259843 213.273057 0 ] (ensure-that-the-admission-control-plugin-serviceaccount-is-set-automated) [ 552 0 R /XYZ 84.259843 691.623057 0 ] (ensure-that-the-anonymous-auth-argument-is-set-to-false-automated) [ 768 0 R /XYZ 84.259843 718.791496 0 ] (ensure-that-the-api-server-only-makes-use-of-strong-cryptographic-ciphers-automated) [ 645 0 R /XYZ 84.259843 162.841563 0 ] (ensure-that-the-api-server-pod-specification-file-ownership-is-set-to-rootroot-automated) [ 307 0 R /XYZ 84.259843 532.191496 0 ] (ensure-that-the-api-server-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated) [ 307 0 R /XYZ 84.259843 682.791496 0 ] (ensure-that-the-audit-policy-covers-key-security-concerns-manual) [ 740 0 R /XYZ 84.259843 312.320079 0 ] (ensure-that-the-certificate-authorities-file-permissions-are-set-to-644-or-more-restrictive-automated) [ 749 0 R /XYZ 84.259843 443.429014 0 ] (ensure-that-the-client-certificate-authorities-file-ownership-is-set-to-rootroot-automated) [ 758 0 R /XYZ 84.259843 733.820079 0 ] (ensure-that-the-cluster-admin-role-is-only-used-where-required-manual) [ 809 0 R /XYZ 84.259843 682.791496 0 ] (ensure-that-the-cni-in-use-supports-network-policies-manual) [ 859 0 R /XYZ 84.259843 682.791496 0 ] (ensure-that-the-container-network-interface-file-ownership-is-set-to-rootroot-manual) [ 311 0 R /XYZ 84.259843 760.623057 0 ] (ensure-that-the-container-network-interface-file-permissions-are-set-to-644-or-more-restrictive-manual) [ 309 0 R /XYZ 84.259843 226.970079 0 ] (ensure-that-the-controller-manager-pod-specification-file-ownership-is-set-to-rootroot-automated) [ 307 0 R /XYZ 84.259843 245.991496 0 ] (ensure-that-the-controller-manager-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated) [ 307 0 R /XYZ 84.259843 396.591496 0 ] (ensure-that-the-controller-manager.conf-file-ownership-is-set-to-rootroot-automated) [ 315 0 R /XYZ 84.259843 648.770079 0 ] (ensure-that-the-controller-manager.conf-file-permissions-are-set-to-644-or-more-restrictive-automated) [ 315 0 R /XYZ 84.259843 799.370079 0 ] (ensure-that-the-etcd-data-directory-ownership-is-set-to-etcdetcd-automated) [ 499 0 R /XYZ 84.259843 799.370079 0 ] (ensure-that-the-etcd-data-directory-permissions-are-set-to-700-or-more-restrictive-automated) [ 486 0 R /XYZ 84.259843 409.152842 0 ] (ensure-that-the-etcd-pod-specification-file-ownership-is-set-to-rootroot-automated) [ 309 0 R /XYZ 84.259843 362.570079 0 ] (ensure-that-the-etcd-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated) [ 309 0 R /XYZ 84.259843 513.170079 0 ] (ensure-that-the-kubelet---config-configuration-file-has-permissions-set-to-644-or-more-restrictive-automated) [ 758 0 R /XYZ 84.259843 313.143907 0 ] (ensure-that-the-kubelet---config-configuration-file-ownership-is-set-to-rootroot-automated) [ 766 0 R /XYZ 84.259843 799.370079 0 ] (ensure-that-the-kubelet-only-makes-use-of-strong-cryptographic-ciphers-automated) [ 802 0 R /XYZ 84.259843 295.023057 0 ] (ensure-that-the-kubelet-service-file-ownership-is-set-to-rootroot-automated) [ 742 0 R /XYZ 84.259843 547.191496 0 ] (ensure-that-the-kubelet-service-file-permissions-are-set-to-644-or-more-restrictive-automated) [ 742 0 R /XYZ 84.259843 682.791496 0 ] (ensure-that-the-kubernetes-pki-certificate-file-permissions-are-set-to-644-or-more-restrictive-automated) [ 364 0 R /XYZ 84.259843 733.820079 0 ] (ensure-that-the-kubernetes-pki-directory-and-file-ownership-is-set-to-rootroot-automated) [ 315 0 R /XYZ 84.259843 513.170079 0 ] (ensure-that-the-kubernetes-pki-key-file-permissions-are-set-to-600-automated) [ 427 0 R /XYZ 84.259843 541.781993 0 ] (ensure-that-the-proxy-kubeconfig-file-ownership-is-set-to-rootroot-automated) [ 745 0 R /XYZ 84.259843 733.820079 0 ] (ensure-that-the-rotatekubeletservercertificate-argument-is-set-to-true-automated) [ 685 0 R /XYZ 84.259843 799.370079 0 ] (ensure-that-the-scheduler-pod-specification-file-ownership-is-set-to-rootroot-automated) [ 309 0 R /XYZ 84.259843 648.770079 0 ] (ensure-that-the-scheduler-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated) [ 309 0 R /XYZ 84.259843 799.370079 0 ] (ensure-that-the-scheduler.conf-file-ownership-is-set-to-rootroot-automated) [ 311 0 R /XYZ 84.259843 202.276036 0 ] (ensure-that-the-scheduler.conf-file-permissions-are-set-to-644-or-more-restrictive-automated) [ 311 0 R /XYZ 84.259843 337.876036 0 ] (ensure-that-the-seccomp-profile-is-set-to-dockerdefault-in-your-pod-definitions-manual) [ 887 0 R /XYZ 84.259843 598.191496 0 ] (etcd-node-configuration-files) [ 696 0 R /XYZ 41.740157 784.430079 0 ] (extensible-admission-control) [ 885 0 R /XYZ 41.740157 784.430079 0 ] (general-policies) [ 887 0 R /XYZ 41.740157 784.430079 0 ] (header_bottom_text) [ 6 0 R /XYZ 85.009843 392.718898 0 ] (if-proxy-kubeconfig-file-exists-ensure-permissions-are-set-to-644-or-more-restrictive-automated) [ 742 0 R /XYZ 84.259843 411.591496 0 ] (kubelet) [ 768 0 R /XYZ 41.740157 784.430079 0 ] (logging) [ 737 0 R /XYZ 41.740157 784.430079 0 ] (master-node-configuration-files) [ 307 0 R /XYZ 41.740157 784.430079 0 ] (minimize-access-to-create-pods-manual) [ 809 0 R /XYZ 84.259843 290.991496 0 ] (minimize-access-to-secrets-manual) [ 809 0 R /XYZ 84.259843 517.191496 0 ] (minimize-the-admission-of-containers-wishing-to-share-the-host-ipc-namespace-automated) [ 847 0 R /XYZ 84.259843 212.250432 0 ] (minimize-the-admission-of-containers-wishing-to-share-the-host-network-namespace-automated) [ 850 0 R /XYZ 84.259843 574.229014 0 ] (minimize-the-admission-of-containers-wishing-to-share-the-host-process-id-namespace-automated) [ 847 0 R /XYZ 84.259843 583.191496 0 ] (minimize-the-admission-of-containers-with-added-capabilities-manual) [ 854 0 R /XYZ 84.259843 269.081993 0 ] (minimize-the-admission-of-containers-with-allowprivilegeescalation-automated) [ 850 0 R /XYZ 84.259843 203.287950 0 ] (minimize-the-admission-of-containers-with-capabilities-assigned-manual) [ 854 0 R /XYZ 84.259843 148.481993 0 ] (minimize-the-admission-of-containers-with-the-net_raw-capability-manual) [ 854 0 R /XYZ 84.259843 404.681993 0 ] (minimize-the-admission-of-privileged-containers-manual) [ 847 0 R /XYZ 84.259843 718.791496 0 ] (minimize-the-admission-of-root-containers-manual) [ 854 0 R /XYZ 84.259843 555.281993 0 ] (minimize-wildcard-use-in-roles-and-clusterroles-manual) [ 809 0 R /XYZ 84.259843 411.591496 0 ] (network-policies-and-cni) [ 859 0 R /XYZ 41.740157 784.430079 0 ] (overview) [ 298 0 R /XYZ 84.259843 700.022079 0 ] (pod-security-policies) [ 847 0 R /XYZ 41.740157 784.430079 0 ] (prefer-using-secrets-as-files-over-secrets-as-environment-variables-manual) [ 883 0 R /XYZ 84.259843 682.791496 0 ] (rbac-and-service-accounts) [ 809 0 R /XYZ 41.740157 784.430079 0 ] (scheduler) [ 690 0 R /XYZ 41.740157 784.430079 0 ] (secrets-management) [ 883 0 R /XYZ 41.740157 784.430079 0 ] (testing-controls-methodology) [ 298 0 R /XYZ 84.259843 161.276079 0 ] (the-default-namespace-should-not-be-used-automated) [ 887 0 R /XYZ 84.259843 176.991496 0 ] (title-block-header) [ 6 0 R /XYZ 84.259843 502.818898 0 ] (verify-that-the-rotatekubeletservercertificate-argument-is-set-to-true-automated) [ 802 0 R /XYZ 84.259843 593.570079 0 ] (worker-node-configuration-files) [ 742 0 R /XYZ 41.740157 784.430079 0 ] ]
+>>
+>>
+>>
+endobj
+4 0 obj
+<<
+/ExtGState <<
+/a1.0 <<
+/ca 1
+>>
+/A1.0 <<
+/CA 1
+>>
+>>
+/XObject <<
+>>
+/Pattern <<
+>>
+/Shading <<
+>>
+/Font 1072 0 R
+>>
+endobj
+5 0 obj
+<<
+/Filter /FlateDecode
+/Length 2619
+>>
+stream
+xœµšËŽd·
†÷õµ602%R7ÀðÂH lL’E�…]ðØzŒ³Èëçç©Ò¥ºþ¹x&žF÷”H‰G¢>’êŽgÁ׋ˆÍbh×bçË›ÓÛ“„šÿŽw�Cý¾k>G±rì¥åóh
µçTËùé„Ïš{÷§Óß¿8ýûþ™xN¡÷’b>ÿú“«LCmµJ&ª•D%ªœC)¢*1à{g*˜‘«%{TU˜a½e¦‚–R#ª3ÔjÔGU‡©Fc*˜{®DvÄ$Bu0DÌ4]Ì¡`ÑÓ¥Jë©S]….ÖÄtª¡T‹92]¥”ܘÎ`Kî™.Ö̈́é`‹i«LW`‹ªƒ-©Ueº
+[V§]ƒ-ð®Fu°EŠD¦ërofTס“VÛ£.I¹©
+ÓÅ2|S©'
+›T*Ñ%ØR$wªƒ-Y%1�ÂÃÓ�Ykkä´&?Ý*™.Ö”ªQlÁæ3¤[¤† œ à\bHµëÉRÓ`Í£@j=XÊ0�zVzeP‰Ð¥È@ [²F�°Åpr©¶h7ÆM°TaK2e,PÐÖà-Œ
+ÜšôÈX àI,Œ
+àÂLa,PW[1ÆráJ�±@Á\;ÐÅq¯Œ
+êj.‰±@�]µVÜU‹ÂX`à®*ž¤:Øf, ƒÆ¦Œîj”ÊX`à.ŽQb,À®øaa,€¯„Ôš0¸›šc��»©"P]
8ƒÊX`ànÊx¹ÁÝ”%1¸›,Æ8J „fà.’y: [ XÆÄ{è’2`°��–0dp7v„?r¦A«[/ŒÜ�
ÛGu=ÄŠ'ç«b)�± ƒ»TÊX�Á]à³1€ñ51dp7*"5Ó�»1ua,Èà.ò†ÌX w câ[ˆ×¥º¤·ÆX�Á]`)1
+i ÕÕ GŠŒ€q䡌ÜExïŒÜ•¬ÊXPÀ]1¤=T[´%Æä5ÐáØ’3�d5H)˜Ü•ˆf:pW¤vÆ‚îzØd,(Õ©1ÀÀ€,81”f¡×ZJè�òQ] hgÆ‚*d ‹ê`‹Uc,@bºöÆXPlÑ”j‚-H�„‘}Óò ¶À]h}`°™"cHZ7c,¨¹ ê2]I¡Uàšêt±2Ôj¡82 –
+
‡ž± €ž.1Àè¢1Ô[pTŠBKÈÌ™.Â$ÙŒÈt¡‹‘± %Ø‚l�± ¥†*³c"4jI,5Ó™x�Ùš•à©"cŽ *M�’ê`0ÁX€ýñb;3 øA±‰2‡ê`‹fc,h-y¹ÙZƒ-Ic|ÓëÍÊXж ãc,èR‚§ÉŒÀ8t"Œ=6Ô›Ép.½ÞlŒ]õ&J |