End-to-End Kubernetes with Rancher, RKE2, K3s, Fleet, Longhorn, and NeuVector

Compliance and Auditing

To ensure compliance with industry standards and regulations, NeuVector provides a dashboard that displays the compliance status of your nodes, images, and containers. To access this dashboard, navigate to the NeuVector UI and click on Security Risks > Compliance. Here, you can view a list of compliance checks with their CIS ID, category, status, profile, and more.

The CIS ID is a unique identifier for each compliance check, for example:

• D.1.2.2 ensures that the version of Docker is up to date.
• I.4.8 checks if setuid and setgid permissions are removed in the image since they can be exploited by attackers.
• K.1.2.30 ensures that the API Server only makes use of Strong Cryptographic Ciphers
• and so on.

Every ID, as you may have noticed, is prefixed with a letter that represents the category of the compliance check.

• D stands for Docker (the container),
• I for Image,
• K for Kubernetes.

This is also reflected in the Category