• Logo
    Canonical Kubernetes
  • ubuntu.com/kubernetes
  • More resources
    • Forum
    • GitHub
Contents Menu Expand Light mode Dark mode Auto light/dark, in light mode Auto light/dark, in dark mode Skip to content
Canonical Kubernetes
  • Canonical Kubernetes documentation
  • What is Canonical Kubernetes?
  • Deploy from Snap package
    • Overview
    • Tutorials
      • Overview
      • Getting started
      • Basic operations with kubectl
      • Add and remove nodes
    • How-to guides
      • Overview
      • Install Canonical Kubernetes
        • Install
        • ... from a snap
        • ... with a custom bootstrap configuration
        • ... with Multipass
        • ... in LXD
        • ... in air-gapped environments
        • Uninstall the snap
      • Networking
        • Networking
        • Use default DNS
        • Use default network
        • Use default Ingress
        • Use default load balancer
        • Use an alternative CNI
        • Enable Dual-Stack networking
        • Set up an IPv6-only cluster
        • Configure proxy settings
      • Storage
        • Storage
        • Use default storage
        • Use Ceph storage
        • Use cloud storage
      • Security
        • Hardening
        • Hardening guide
        • CIS assessment
        • DISA STIG assessment
      • Use an external datastore
      • Set up cluster observability
      • Back up and restore
      • Refresh Kubernetes Certificates
      • Recover a cluster after quorum loss
      • Two-Node High-Availability with Dqlite
      • Manage upgrades
      • Set up Enhanced Platform Awareness
      • Manage images
      • Contribute to Canonical Kubernetes
      • Get support
      • Troubleshooting
    • Explanation
      • Overview
      • What is Canonical Kubernetes?
      • Choose an installation method
      • Channels
      • Clustering
      • High availability
      • Certificates
      • Ingress
      • Load balancer
      • Upgrades
      • Enhanced Platform Awareness
      • Security
      • CIS hardening
      • Package management with Helm
    • Reference
      • Overview
      • Release notes
        • 1.31
        • 1.32
      • Configuration files
        • Configuration Files
        • Bootstrap configuration file
        • Control plane node join configuration file
        • Worker node join configuration file
      • Commands
      • Services and ports
      • Annotations
      • Cluster certificates and configuration directories
      • Proxy environment variables
      • Troubleshooting
      • Architecture
      • Community
  • Deploy with Juju
    • Overview
    • Tutorials
      • Overview
      • Getting started
      • Basic Canonical Kubernetes charm operations
    • How-to guides
      • Overview
      • Install Canonical Kubernetes
        • Install
        • ... from a charm
        • ... in LXD
        • ... with Terraform
        • ... with a custom configuration
        • ... with custom worker configuration
      • Configure the cluster
      • Integrate with OpenStack
      • Integrate with etcd
      • Integrate with ceph-csi
      • Integrate with COS Lite
      • Configure proxy settings
      • Configure a custom registry
      • Upgrade minor version
      • Upgrade patch version
      • Validate the cluster
      • Troubleshooting
      • Contribute to Canonical Kubernetes
    • Explanation
      • Overview
      • What is Canonical Kubernetes?
      • Choose an installation method
      • Channels
      • Ingress
      • Load balancer
      • Security
      • Upgrades
    • Reference
      • Overview
      • Charms
      • Architecture
      • Configuration options
      • Ports and services
      • Proxy environment variables
      • Actions
      • Troubleshooting
      • Community
      • Release notes
        • 1.32
  • Deploy with Cluster API
    • Overview
    • Tutorials
      • Overview
      • Getting started
    • How-to guides
      • Overview
      • Install custom Canonical Kubernetes
      • Use external etcd
      • Upgrade the Kubernetes version
      • Perform an in-place upgrade
      • Upgrade the providers of a management cluster
      • Migrate the management cluster
      • Refresh workload cluster certificates
    • Explanation
      • Overview
      • What is Canonical Kubernetes?
      • Choose an installation method
      • Cluster API - Canonical Kubernetes
      • Ingress
      • Load balancer
      • In-place upgrades
      • Security
    • Reference
      • Overview
      • Release notes
        • 1.31
        • 1.32
      • Annotations
      • Ports and services
      • Community
      • Providers configurations
  • Community
  • Release notes
    • Snap release notes
      • 1.31
      • 1.32
    • Charm release notes
      • 1.32
Back to top
View this page

SecurityΒΆ

Administrators are provided with detailed instructions and compliance guidance to harden their clusters in accordance with DISA STIG and CIS recommendations.

  • Hardening guide
  • CIS assessment
  • DISA STIG assessment
Copyright © 2025 CC-BY-SA, Canonical Group Ltd
Last updated on Jan 24, 2025
Show source
Ask a question on Discourse
Ask a question on Slack
Open a GitHub issue for this page
Edit this page on GitHub
Contents
  • Security