Skip to content

Commit

Permalink
Fix markdown
Browse files Browse the repository at this point in the history
  • Loading branch information
andypitcher committed Sep 7, 2023
1 parent ec43045 commit a9da000
Showing 1 changed file with 5 additions and 2 deletions.
7 changes: 5 additions & 2 deletions docs/pages-for-subheaders/k3s-hardening-guide.md
Original file line number Diff line number Diff line change
Expand Up @@ -21,7 +21,7 @@ This hardening guide is intended to be used for K3s clusters and is associated w
| Rancher v2.7 | Benchmark v1.7 | Kubernetes v1.25 up to v1.26 |

:::note
- In Benchmark v1.7, the `--protect-kernel-defaults` (`4.2.6`) parameter isn't required anymore, and was removed by CIS.
- In Benchmark v1.7, the `--protect-kernel-defaults` (4.2.6) parameter isn't required anymore, and was removed by CIS.
:::

For more details on how to evaluate a hardened K3s cluster against the official CIS benchmark, refer to the K3s self-assessment guides for specific Kubernetes and CIS benchmark versions.
Expand All @@ -42,7 +42,7 @@ The first section (1.1) of the CIS Benchmark primarily focuses on pod manifest
<Tabs groupId="k3s-version">
<TabItem value="v1.25 and Newer" default>

`protect-kernel-defaults` is no longer required since CIS benchmark 1.7.
The `protect-kernel-defaults` is no longer required since CIS benchmark 1.7.

</TabItem>
<TabItem value="v1.24 and Older">
Expand All @@ -59,6 +59,9 @@ spec:
protect-kernel-defaults: true
```
</TabItem>
</Tabs>
### Set kernel parameters
The following `sysctl` configuration is recommended for all nodes type in the cluster. Set the following parameters in `/etc/sysctl.d/90-kubelet.conf`:
Expand Down

0 comments on commit a9da000

Please sign in to comment.