Skip to main content

💼 4.2.9 Ensure that the --event-qps argument is set to 0 or a level which ensures appropriate event capture (Scored)

  • ID: /frameworks/cis-gke-v1.0.0/04/02/09

Description​

Security relevant information should be captured. The --event-qps flag on the Kubelet can be used to limit the rate at which events are gathered. Setting this too low could result in relevant events not being logged, however the unlimited setting of 0 could result in a denial of service on the kubelet.

Similar​

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlagsCompliance