Skip to main content

Cluster Benchmark feature

Cluster Benchmark lets administrators check worker node kubelet configuration against the standards proposed by the Center for Internet Security (CIS), so you can verify your Managed - FPT Kubernetes Engine cluster's security posture.

CIS Benchmarks are a comprehensive set of security configuration guidelines developed by the Center for Internet Security — best practices for securing systems, services, and software.

Test cases are applied per Kubernetes version and adjusted to match FPT Cloud's kubelet configuration. Each test case returns one of 3 results:

  • Pass — the configuration satisfies the CIS test case.
  • Fail — the configuration fails a high-importance test case.
  • Warning — the configuration fails a lower-importance, optional test case.
note

Security enhancement features are available only after the cluster is successfully created (status: Succeeded/Running).

Enable Benchmark Security​

Go to console.fptcloud.com, select Kubernetes, select your cluster, open the Security tab, select Benchmark Security, then enable it.

Benchmark Security tab with the enable toggle

After the benchmark job runs successfully, detailed results appear. Re-run the benchmark for the latest results, or download the results.

Benchmark Security results with Pass/Fail/Warning counts

Disable Benchmark Security​

Go to console.fptcloud.com, select Kubernetes, select your cluster, open the Security tab, select Benchmark Security, then confirm to disable it.

Disable Benchmark Security confirmation dialog