This message was deleted Rancher Users #rke2

Join Slack

This message was deleted.

# rke2

adamant-kite-43734

10/01/2025, 5:12 PM

This message was deleted.

creamy-pencil-82913

10/01/2025, 5:49 PM

They are required because CIS requires them. The CIS benchmarks are developed by an industry group and published to members. Our guides reference those benchmarks. The reasoning WHY something is required is usually covered in the full publication.

creamy-pencil-82913

10/01/2025, 5:50 PM

https://www.cisecurity.org/cis-benchmarks

creamy-crayon-86622

10/01/2025, 6:22 PM

Thanks for the fast response, Brandon! I will take a look at those docs

creamy-crayon-86622

10/03/2025, 12:23 PM

Hey Brandond, do you happen to remember what CIS benchmark document is typically rke2 refers to? Ive looked at the

CIS Kubernetes Benchmark v1.12 - 09-26-2025

and

CIS Ubuntu Linux 24.04 LTS Benchmark v1.0.0 - 08-26-2024

but cannot find any document that refers to that configuration. The picture below doesnt show RKE2 either so maybe im missing something here. If you have any suggestions or pointers, that would be appreciated. Thanks!

creamy-crayon-86622

10/03/2025, 12:49 PM

Actually Ive found that this falls under the protect-kernel-defaults. I was searching for overcommit_memory. So that gives me more to go on. Thanks

7 Views

Open in Slack

Previous Next