Compliance as Code: CIS Hardening, OpenSCAP Gates and Policy Checks
Enforce CIS network sysctl baselines with Ansible, gate deployments on OpenSCAP results, and reject Ingress objects without TLS using an OPA admission policy.
Found 3 results for: Style Transfer
Enforce CIS network sysctl baselines with Ansible, gate deployments on OpenSCAP results, and reject Ingress objects without TLS using an OPA admission policy.
A 2010-era baseline for CentOS 5 and Ubuntu 10.04: key-only SSH, a default-drop iptables policy, sysctl network settings and fewer listening services.
Why Kubernetes, Docker Swarm and Nomad clusters turn flaky on slow disks or stolen CPU, how to measure it with fio and vmstat, and what to change.