QKXY CS001—2023云原生安全配置基线规范.pptx

Q/KXY

云计算开源产业联盟技术文件

Q/KXYCS001—2023

云原生安全配置基线规范

Cloud-nativeSecurityConfigurationBaselineSpecification

云计算开源产业联盟

2023-07-28实施

2023-07-25发布

前言..........................................................................IV

1范围...............................................................................1

2规范性引用文件.....................................................................1

3术语、定义和缩略语.................................................................1

3.1术语和定义.....................................................................1

3.2缩略语.........................................................................1

4框架概述...........................................................................2

5云原生安全配置基线要求.............................................................2

5.1APIServer安全配置要求...........................................................2

5.1.1.文件目录安全.................................................................2

5.1.2身份认证和访问控制...........................................................3

5.1.3防止拒绝服务攻击.............................................................4

5.1.4防止信息泄露.................................................................4

5.1.5日志安全.....................................................................5

5.1.6SSL/TLS配置..................................................................5

5.2控制管理器安全配置要求...........................................................5

5.2.1文件目录安全.................................................................5

5.2.2身份认证和访问控制...........................................................6

5.2.3防止拒绝服务.................................................................6

5.2.4防止信息泄露.................................................................6

5.3调度器安全配置要求...............................................................7

5.3.1文件目录安全.................................................................7

5.3.2防止信息泄露..............................