This message was deleted.

gatekeeper btw, rke2 natively has CIS profile support to make the cluster pass CIS benchmarks.

can you provide a link the gatekeeper application?

https://github.com/open-policy-agent/gatekeeper, gk is more for CIS benchmark as of FIPS, i believe rke2 is natively FIPS compliant as compiled by boringcrypto , isn’t it?