CIS Kubernetes Benchmark v1.9.0

ps -ef | grep kube-apiserver 

--anonymous-auth=false 

ps -ef | grep kube-apiserver 

ps -ef | grep kube-apiserver 

ps -ef | grep kube-apiserver 

--kubelet-client-certificate= 
--kubelet-client-key= 

ps -ef | grep kube-apiserver 

--kubelet-certificate-authority=<ca-string> 

ps -ef | grep kube-apiserver 

--authorization-mode=RBAC 

ps -ef | grep kube-apiserver 

--authorization-mode=Node,RBAC 

ps -ef | grep kube-apiserver 

--authorization-mode=Node,RBAC 

ps -ef | grep kube-apiserver 

--enable-admission-plugins=...,EventRateLimit,... 
--admission-control-config-file= 

ps -ef | grep kube-apiserver 

ps -ef | grep kube-apiserver 

--enable-admission-plugins=...,AlwaysPullImages,... 

ps -ef | grep kube-apiserver 

ps -ef | grep kube-apiserver 

ps -ef | grep kube-apiserver 

--enable-admission-plugins=...,NodeRestriction,... 

ps -ef | grep kube-apiserver 

--profiling=false 

ps -ef | grep kube-apiserver 

--audit-log-path=/var/log/apiserver/audit.log 

ps -ef | grep kube-apiserver 

--audit-log-maxage=30 

ps -ef | grep kube-apiserver 

--audit-log-maxbackup=10 

ps -ef | grep kube-apiserver 

--audit-log-maxsize=100 

ps -ef | grep kube-apiserver 

--request-timeout=300s 

ps -ef | grep kube-apiserver 

--service-account-lookup=true 

ps -ef | grep kube-apiserver 

--service-account-key-file=<filename> 

ps -ef | grep kube-apiserver 

--etcd-certfile= 
--etcd-keyfile= 

ps -ef | grep kube-apiserver 

--tls-cert-file=<path/to/tls-certificate-file>
--tls-private-key-file=<path/to/tls-key-file>

ps -ef | grep kube-apiserver 

--client-ca-file=<path/to/client-ca-file>

ps -ef | grep kube-apiserver 

--etcd-cafile= 

ps -ef | grep kube-apiserver 

--encryption-provider-config= 

ps -ef | grep kube-apiserver 

ps -ef | grep kube-apiserver 

--tls-cipher--
suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SH A256,TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SH A256,TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SH A384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_CHACHA20_POL Y1305_SHA256,TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_128_C BC_SHA,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_CBC_S HA,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 ,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256,TLS_RSA_WITH_3DES_EDE_CBC_SHA,TL S_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_128_GCM_SHA256,TLS_RSA_WITH_AES_2 56_CBC_SHA, TLS_RSA_WITH_AES_256_GCM_SHA384.