How do I install the Cis K8S V1111 1.1.20 skill?

Run npx skillmds@latest add cyberstrikeus/cis-k8s-v1111-1-1-20 in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Cis K8S V1111 1.1.20 safe to use?

SkillMD's automated safety review verdict for this skill is PASS. Independent scanners report: SkillSpector: PASS, Skill Scanner: PASS. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Cis K8S V1111 1.1.20?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Cis K8S V1111 1.1.20 free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Cis K8S V1111 1.1.20?

cyberstrikeus (@cyberstrikeus) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Cis K8S V1111 1.1.20 by cyberstrikeus

Name: Cis K8S V1111 1.1.20
Author: cyberstrikeus

File contents

CIS Kubernetes Benchmark v1.11.1 - Control 1.1.20

Profile Applicability

Level: 1 - Master Node

Description

Ensure that Kubernetes PKI certificate files have permissions of 644 or more restrictive.

Rationale

Kubernetes makes use of a number of certificate files as part of the operation of its components. The permissions on these files should be set to 644 or more restrictive to protect their integrity and confidentiality.

Impact

None

Audit

Run the below command (based on the file location on your system) on the Control Plane node. For example,

stat -c '%a' /etc/kubernetes/pki/*.crt

Verify that the permissions are 644 or more restrictive.

ls -l /etc/kubernetes/pki/*.crt

Verify -rw------.

Remediation

Run the below command (based on the file location on your system) on the Control Plane node. For example,

chmod -R 644 /etc/kubernetes/pki/*.crt

Default Value

By default, the certificates used by Kubernetes are set to have permissions of 644.

References

https://kubernetes.io/docs/admin/kube-apiserver/

CIS Controls

Controls Version	Control	IG 1	IG 2	IG 3
v8	5.4 Restrict Administrator Privileges to Dedicated Administrator AccountsRestrict administrator privileges to dedicated administrator accounts on enterprise assets. Conduct general computing activities, such as internet browsing, email, and productivity suite use, from the user's primary, non-privileged account.	●	●	●
v7	4 Controlled Use of Administrative PrivilegesControlled Use of Administrative Privileges

---name: cis-k8s-v1111-1-1-20description: Ensure that the Kubernetes PKI certificate file permissions are set to 644 or more restrictive (Manual)---# CIS Kubernetes Benchmark v1.11.1 - Control 1.1.20## Profile Applicability- **Level:** 1 - Master Node## DescriptionEnsure that Kubernetes PKI certificate files have permissions of `644` or more restrictive.## RationaleKubernetes makes use of a number of certificate files as part of the operation of its components. The permissions on these files should be set to `644` or more restrictive to protect their integrity and confidentiality.## ImpactNone## AuditRun the below command (based on the file location on your system) on the Control Plane node. For example,```bashstat -c '%a' /etc/kubernetes/pki/*.crt```Verify that the permissions are `644` or more restrictive.or```bashls -l /etc/kubernetes/pki/*.crt```Verify `-rw------`.## RemediationRun the below command (based on the file location on your system) on the Control Plane node. For example,```bashchmod -R 644 /etc/kubernetes/pki/*.crt```## Default ValueBy default, the certificates used by Kubernetes are set to have permissions of `644`.## References1. https://kubernetes.io/docs/admin/kube-apiserver/## CIS Controls| Controls Version | Control | IG 1 | IG 2 | IG 3 || ---------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | ---- | ---- | ---- || v8 | 5.4 Restrict Administrator Privileges to Dedicated Administrator Accounts<br/>Restrict administrator privileges to dedicated administrator accounts on enterprise assets. Conduct general computing activities, such as internet browsing, email, and productivity suite use, from the user's primary, non-privileged account. | ● | ● | ● || v7 | 4 Controlled Use of Administrative Privileges<br/>Controlled Use of Administrative Privileges | | | |

Frequently asked questions

Cis K8S V1111 1.1.20