Tanzu Kubernetes Grid Integrated Edition Security

The following topics describe VMware Tanzu Kubernetes Grid Integrated Edition (TKGI) security and security procedures:

• Security Disclosure and Release Process: See Tanzu Kubernetes Grid Integrated Edition Security Disclosure and Release Process
• Certificates: See Tanzu Kubernetes Grid Integrated Edition Certificates
• Benchmarks: See TKGI Cluster Benchmarks, below.

CIS Kubernetes Benchmarks

For security compliance assessments, you can use Compliance Scanner for VMware Tanzu to benchmark TKGI clusters against the Center for Internet Security CIS Kubernetes Benchmark v1.6.0.

Complete the following procedures in Installing and Configuring Compliance Scanner:

1. Complete all of the Installing and Configuring Compliance Scanner steps preceding the Configure scans procedure.

   For example:

   • Install Compliance Scanner
   • Configure AZs and networks
   • Configure scan variables
   • Any other procedures preceding Configure scans
2. Complete the Configure scans procedure:
   • Activate the following in the Scan Configuration pane, under Benchmarks:
     • TKGI Master Node - Level 1 and Level 2
     • TKGI Worker Node - Level 1 and Level 2
3. Complete all remaining steps in Installing and Configuring Compliance Scanner.