vania-janet/multiturn-rag-retrieval-data huggingface dataset:
Show more

The unit-test compliance control is determined by the exit code of the stage script itself. If your tests pass, exit with 0, if not, return a non-zero exit code at the end.





 Saving results 

Your tests might generate some report artifacts, such as a test results JSON or XML. To attach those to the created compliance evidence as evidence artifacts, use the save_result pipelinectl interface in this stage.


 run tests with some test suite runner, and save output to results.json

test_runner -o results.json


 save the result for the pipeline, so it can attach it to the unit test evidence

save_result test results.json

The first parameter of save_results must be the DevSecOps pipeline config stage name, like test, scan-artifact or acceptance-test. Otherwise the evidence collector won't be able to find it and attach it to the proper piece of evidence.

Using the save_result pipelinectl interface ensures that the pipeline finds your result artifacts, they are uploaded to the evidence locker, and attached to the compliance evidence that is created by the pipeline.

Example evidence created for the unit tests while using save_result:

{
"evidence_type_id": "com.ibm.unit_tests",
"evidence_type_version": "1.0.0",
"date": "2021-03-31T07:41:31.881Z",
"result": "success",
"pipeline_id": "8c2b6750-91db-45fb-98ee-51684843b821",
"pipeline_run_id": "89a04de9-2795-4e8e-be90-52a92ac7f9c1",
"issues": [],
"artifacts": [
{
1.3.1 Ensure that the --terminated-pod-gc-threshold option is set as appropriate. Scored 1 Pass IBM 
 1.3.2 Ensure that the --profiling option is set to false. Scored 1 Pass IBM 
 1.3.3 Ensure that the --use-service-account-credentials option is set to true. Scored 1 Pass IBM 
 1.3.4 Ensure that the --service-account-private-key-file option is set as appropriate. Scored 1 Pass IBM 
 1.3.5 Ensure that the --root-ca-file option is set as appropriate. Scored 1 Pass IBM 
 1.3.6 Ensure that the RotateKubeletServerCertificate option is set to true. Scored 2 [Fail](https://cloud.ibm.com/docs/containers?topic=containers-cis-benchmark-122cis-benchmark-remediations-122) IBM 
 1.3.7 Ensure that the --bind-address option is set to 127.0.0.1. Scored 1 Pass IBM 







 1.4 Scheduler 



Section 1.4 Scheduler benchmark results

 Section Recommendation Scored/Not Scored Level Result Responsibility 

 1.4.1 Ensure that the --profiling option is set to false. Scored 1 Pass IBM 
 1.4.2 Ensure that the --bind-address option is set to 127.0.0.1. Scored 1 Pass IBM 









 2 Etcd node configuration 

Review the Etcd Node Configuration results of the version 1.5 CIS Kubernetes benchmark.



Section 2 Etcd Node Configuration benchmark results

 Section Recommendation Scored/Not Scored Level Result Responsibility 

 2.1 Ensure that the --cert-file and --key-file options are set as appropriate. Scored 1 Pass IBM 
 2.2 Ensure that the --client-cert-auth option is set to true. Scored 1 Pass IBM 
 2.3 Ensure that the --auto-tls option is not set to true. Scored 1 Pass IBM
Not Scored 1 [Fail](https://cloud.ibm.com/docs/containers?topic=containers-cis-benchmark-124cis-benchmark-remediations-124) Shared 
 5.1.3 Minimize wildcard use in Roles and ClusterRoles. Not Scored 1 [Fail](https://cloud.ibm.com/docs/containers?topic=containers-cis-benchmark-124cis-benchmark-remediations-124) Shared 
 5.1.4 Minimize access to create pods. Not Scored 1 Pass Shared 
 5.1.5 Ensure that default service accounts are not actively used. Scored 1 [Fail](https://cloud.ibm.com/docs/containers?topic=containers-cis-benchmark-124cis-benchmark-remediations-124) Shared 
 5.1.6 Ensure that Service Account Tokens are only mounted where necessary. Not Scored 1 [Fail](https://cloud.ibm.com/docs/containers?topic=containers-cis-benchmark-124cis-benchmark-remediations-124) Shared 







 5.2 Pod Security Policies 



Section 5.2 Pod Security Policies benchmark results

 Section Recommendation Scored? Level Result Responsibility 

 5.2.1 Minimize the admission of privileged containers. Not Scored 1 [Pass](https://cloud.ibm.com/docs/containers?topic=containers-cis-benchmark-124cis-benchmark-remediations-124) Shared 
 5.2.2 Minimize the admission of containers wanting to share the host process ID namespace. Scored 1 [Pass](https://cloud.ibm.com/docs/containers?topic=containers-cis-benchmark-124cis-benchmark-remediations-124) Shared 
 5.2.3 Minimize the admission of containers wanting to share the host IPC namespace. Scored 1 [Pass](https://cloud.ibm.com/docs/containers?topic=containers-cis-benchmark-124cis-benchmark-remediations-124) Shared 
 5.2.4 Minimize the admission of containers wanting to share the host network namespace.
Not Scored 1 [Fail](https://cloud.ibm.com/docs/containers?topic=containers-cis-benchmark-122cis-benchmark-remediations-122) Shared 
 5.1.3 Minimize wildcard use in Roles and ClusterRoles. Not Scored 1 [Fail](https://cloud.ibm.com/docs/containers?topic=containers-cis-benchmark-122cis-benchmark-remediations-122) Shared 
 5.1.4 Minimize access to create pods. Not Scored 1 Pass Shared 
 5.1.5 Ensure that default service accounts are not actively used. Scored 1 [Fail](https://cloud.ibm.com/docs/containers?topic=containers-cis-benchmark-122cis-benchmark-remediations-122) Shared 
 5.1.6 Ensure that Service Account Tokens are only mounted where necessary. Not Scored 1 [Fail](https://cloud.ibm.com/docs/containers?topic=containers-cis-benchmark-122cis-benchmark-remediations-122) Shared 







 5.2 Pod Security Policies 



Section 5.2 Pod Security Policies benchmark results

 Section Recommendation Scored/Not Scored Level Result Responsibility 

 5.2.1 Minimize the admission of privileged containers. Not Scored 1 [Pass](https://cloud.ibm.com/docs/containers?topic=containers-cis-benchmark-122cis-benchmark-remediations-122) Shared 
 5.2.2 Minimize the admission of containers wanting to share the host process ID namespace. Scored 1 [Pass](https://cloud.ibm.com/docs/containers?topic=containers-cis-benchmark-122cis-benchmark-remediations-122) Shared 
 5.2.3 Minimize the admission of containers wanting to share the host IPC namespace. Scored 1 [Pass](https://cloud.ibm.com/docs/containers?topic=containers-cis-benchmark-122cis-benchmark-remediations-122) Shared 
 5.2.4 Minimize the admission of containers wanting to share the host network namespace.
Section 2 Etcd Node Configuration benchmark results

 Section Recommendation Scored/Not Scored Level Result Responsibility 

 2.1 Ensure that the --cert-file and --key-file options are set as appropriate. Scored 1 Pass IBM 
 2.2 Ensure that the --client-cert-auth option is set to true. Scored 1 Pass IBM 
 2.3 Ensure that the --auto-tls option is not set to true. Scored 1 Pass IBM 
 2.4 Ensure that the --peer-cert-file and --peer-key-file options are set as appropriate. Scored 1 Pass IBM 
 2.5 Ensure that the --peer-client-cert-auth option is set to true. Scored 1 Pass IBM 
 2.6 Ensure that the --peer-auto-tls option is not set to true. Scored 1 Pass IBM 
 2.7 Ensure that a unique Certificate Authority is used for etcd. Not Scored 2 Pass IBM 







 3 Control plane configuration 

Review the Control Plane Configuration results of the version 1.5 CIS Kubernetes benchmark.



 3.1 Authentication and authorization 



Section 3.1 Authentication and Authorization benchmark results

 Section Recommendation Scored/Not Scored Level Result Responsibility 

 3.1.1 Client certificate authentication should not be used for users. Not Scored 2 Pass Shared 







 3.2 Logging 



Section 3.2 Logging benchmark results

 Section Recommendation Scored/Not Scored Level Result Responsibility 

 3.2.1 Ensure that a minimal audit policy is created. Scored 1 [Fail](https://cloud.ibm.com/docs/containers?topic=containers-cis-benchmark-122cis-benchmark-remediations-122) Shared 
 3.2.2 Ensure that the audit policy covers key security concerns. Not Scored 2 [Fail](https://cloud.ibm.com/docs/containers?topic=containers-cis-benchmark-122cis-benchmark-remediations-122) Shared 









 4 Worker node security configuration 

Review the Worker Node Security Configuration results of the version 1.5 CIS Kubernetes benchmark.



 4.1 Worker node configuration files
"issues": 134,132,342], // link(s) to the issue(s) created to track the bugs found during the test run. Should be populated only if the test failed
"required": "yes" | "no" ] // yes: this is an auditable step; no: this is a non auditable step
}, {
"evidence_type_id": "com.ibm.unit_test",
"version": "1.0.0",
"date": "2020-05-06T12:00:00Z", // date of task run
"origin": {
"url":"https://us-south.git.cloud.ibm.com/open-toolchain/compliance-pipelines/-/blob/master/definitions/mytask.yaml", // where the task is taken from
"version": "423792" // commit id representing the task version used to produce the evidence
}
"toolchain_crn": "crn:v1:bluemix:public:toolchain:us-south:a/190e0b4ce4cd013159917665213ddc51:7467a214-f404-4e23-acab-2e57e935d138::" // CRN of the toolchain
"pipeline_id": "b1cfb6a4-813d-4fec-bbf7-ce662e8ce4e0", // the id of the pipeline that generated this piece of evidence
"pipeline_run_id": 12345, // this is the id of the pipeline run that generated this piece of evidence
"result": "passed"|"failed"], // the result of the test
"log": {
"url": "https://acme.org/log.txt", // the link to where the actual log of the test is
"hash": "abc123", // the hash of the log file
},
Section 2 Etcd Node Configuration benchmark results

 Section Recommendation Scored/Not Scored Level Result Responsibility 

 2.1 Ensure that the --cert-file and --key-file options are set as appropriate. Scored 1 Pass IBM 
 2.2 Ensure that the --client-cert-auth option is set to true. Scored 1 Pass IBM 
 2.3 Ensure that the --auto-tls option is not set to true. Scored 1 Pass IBM 
 2.4 Ensure that the --peer-cert-file and --peer-key-file options are set as appropriate. Scored 1 Pass IBM 
 2.5 Ensure that the --peer-client-cert-auth option is set to true. Scored 1 Pass IBM 
 2.6 Ensure that the --peer-auto-tls option is not set to true. Scored 1 Pass IBM 
 2.7 Ensure that a unique Certificate Authority is used for etcd. Not Scored 2 Pass IBM 







 3 Control plane configuration 

Review the Control Plane Configuration results of the version 1.5 CIS Kubernetes benchmark.



 3.1 Authentication and authorization 



Section 3.1 Authentication and Authorization benchmark results

 Section Recommendation Scored/Not Scored Level Result Responsibility 

 3.1.1 Client certificate authentication should not be used for users. Not Scored 2 Pass Shared 







 3.2 Logging 



Section 3.2 Logging benchmark results

 Section Recommendation Scored/Not Scored Level Result Responsibility 

 3.2.1 Ensure that a minimal audit policy is created. Scored 1 [Fail](https://cloud.ibm.com/docs/containers?topic=containers-cis-benchmark-123cis-benchmark-remediations-123) Shared 
 3.2.2 Ensure that the audit policy covers key security concerns. Not Scored 2 [Fail](https://cloud.ibm.com/docs/containers?topic=containers-cis-benchmark-123cis-benchmark-remediations-123) Shared 









 4 Worker node security configuration 

Review the Worker Node Security Configuration results of the version 1.5 CIS Kubernetes benchmark.



 4.1 Worker node configuration files
1.3.1 Ensure that the --terminated-pod-gc-threshold option is set as appropriate. Scored 1 Pass IBM 
 1.3.2 Ensure that the --profiling option is set to false. Scored 1 Pass IBM 
 1.3.3 Ensure that the --use-service-account-credentials option is set to true. Scored 1 Pass IBM 
 1.3.4 Ensure that the --service-account-private-key-file option is set as appropriate. Scored 1 Pass IBM 
 1.3.5 Ensure that the --root-ca-file option is set as appropriate. Scored 1 Pass IBM 
 1.3.6 Ensure that the RotateKubeletServerCertificate option is set to true. Scored 2 [Fail](https://cloud.ibm.com/docs/containers?topic=containers-cis-benchmark-123cis-benchmark-remediations-123) IBM 
 1.3.7 Ensure that the --bind-address option is set to 127.0.0.1. Scored 1 Pass IBM 







 1.4 Scheduler 



Section 1.4 Scheduler benchmark results

 Section Recommendation Scored/Not Scored Level Result Responsibility 

 1.4.1 Ensure that the --profiling option is set to false. Scored 1 Pass IBM 
 1.4.2 Ensure that the --bind-address option is set to 127.0.0.1. Scored 1 Pass IBM 









 2 Etcd node configuration 

Review the Etcd Node Configuration results of the version 1.5 CIS Kubernetes benchmark.



Section 2 Etcd Node Configuration benchmark results

 Section Recommendation Scored/Not Scored Level Result Responsibility 

 2.1 Ensure that the --cert-file and --key-file options are set as appropriate. Scored 1 Pass IBM 
 2.2 Ensure that the --client-cert-auth option is set to true. Scored 1 Pass IBM 
 2.3 Ensure that the --auto-tls option is not set to true. Scored 1 Pass IBM
Scored 1 [Fail](https://cloud.ibm.com/docs/containers?topic=containers-cis-benchmark-126cis-benchmark-remediations-126) Shared 
 5.1.6 Ensure that Service Account Tokens are only mounted where necessary Not Scored 1 [Fail](https://cloud.ibm.com/docs/containers?topic=containers-cis-benchmark-126cis-benchmark-remediations-126) Shared 







 5.2 Pod Security Policies 



Section 5.2 Pod Security Policies benchmark results

 Section Recommendation Scored/Not Scored Level Result Responsibility 

 5.2.1 Minimize the admission of privileged containers Not Scored 1 [Pass](https://cloud.ibm.com/docs/containers?topic=containers-cis-benchmark-126cis-benchmark-remediations-126) Shared 
 5.2.2 Minimize the admission of containers wishing to share the host process ID namespace Scored 1 [Pass](https://cloud.ibm.com/docs/containers?topic=containers-cis-benchmark-126cis-benchmark-remediations-126) Shared 
 5.2.3 Minimize the admission of containers wishing to share the host IPC namespace Scored 1 [Pass](https://cloud.ibm.com/docs/containers?topic=containers-cis-benchmark-126cis-benchmark-remediations-126) Shared 
 5.2.4 Minimize the admission of containers wishing to share the host network namespace Scored 1 [Pass](https://cloud.ibm.com/docs/containers?topic=containers-cis-benchmark-126cis-benchmark-remediations-126) Shared 
 5.2.5 Minimize the admission of containers with allowPrivilegeEscalation Scored 1 [Pass](https://cloud.ibm.com/docs/containers?topic=containers-cis-benchmark-126cis-benchmark-remediations-126) Shared 
 5.2.6 Minimize the admission of root containers Not Scored 2 [Pass](https://cloud.ibm.com/docs/containers?topic=containers-cis-benchmark-126cis-benchmark-remediations-126) Shared
1.2.32 Ensure that the --etcd-cafile option is set as appropriate. Scored 1 Pass IBM 
 1.2.33 Ensure that the --encryption-provider-config option is set as appropriate. Scored 1 [Fail](https://cloud.ibm.com/docs/openshift?topic=openshift-cis-benchmark-46cis-benchmark-remediations-46) Shared 
 1.2.34 Ensure that encryption providers are appropriately configured. Scored 1 [Fail](https://cloud.ibm.com/docs/openshift?topic=openshift-cis-benchmark-46cis-benchmark-remediations-46) Shared 
 1.2.35 Ensure that the API Server makes use of only Strong Cryptographic Ciphers. Not Scored 1 Pass IBM 







 1.3 Controller manager 



Section 1.3 Controller manager benchmark results

 Section Recommendation Scored/Not Scored Level Result Responsibility 

 1.3.1 Ensure that the --terminated-pod-gc-threshold option is set as appropriate. Scored 1 Pass IBM 
 1.3.2 Ensure that the --profiling option is set to false. Scored 1 Pass IBM 
 1.3.3 Ensure that the --use-service-account-credentials option is set to true. Scored 1 Pass IBM 
 1.3.4 Ensure that the --service-account-private-key-file option is set as appropriate. Scored 1 Pass IBM 
 1.3.5 Ensure that the --root-ca-file option is set as appropriate. Scored 1 Pass IBM 
 1.3.6 Ensure that the RotateKubeletServerCertificate option is set to true. Scored 2 Pass IBM 
 1.3.7 Ensure that the --bind-address option is set to 127.0.0.1. Scored 1 Pass IBM 







 1.4 Scheduler 



Section 1.4 Scheduler benchmark results

 Section Recommendation Scored/Not Scored Level Result Responsibility 

 1.4.1 Ensure that the --profiling option is set to false. Scored 1 Pass IBM
If the top intent has a low confidence score (less than 0.2), the top intent is included in the intents array that is returned by the API, but any nodes that condition on the intent are not triggered. If you want to detect the case when no intents with good confidence scores were detected, use the irrelevant special condition in your dialog node. See [Special conditions](https://cloud.ibm.com/docs/assistant-data?topic=assistant-data-dialog-overviewdialog-overview-special-conditions) for more information.

As intent confidence scores change, your dialogs might need restructuring. For example, if a dialog node uses an intent in its condition, and the intent's confidence score starts to consistently drop below 0.2, the dialog node stops being processed. If the confidence score changes, the behavior of the dialog can also change.





 Intent limits 



Limit details

 Intents per skill Examples per skill 

 2,000 25,000 







 Editing intents 

You can click any intent in the list to open it for editing. You can make the following changes:



* Rename the intent.
* Delete the intent.
* Add, edit, or delete examples.
* Move an example to a different intent.



You can tab from the intent name to each example.



1. To move or delete an example, click the checkbox that is associated with it, and then click Move or Delete.

![Screen capture showing how to move or delete an example](https://cloud.ibm.com/docs-content/v1/content/a2b18c153837bce00a5b4de496e4b4ca64bbf56e/assistant-data/images/move_example.png)







 Searching intents 

The search capability was introduced with the 1.5.0 release.

Use the Search feature to find user examples, intent names, and descriptions.



1. From the Intents page header, click the Search icon !
Not Scored 1 [Pass](https://cloud.ibm.com/docs/containers?topic=containers-cis-benchmark-119cis-benchmark-remediations-119) Shared 
 5.2.2 Minimize the admission of containers wanting to share the host process ID namespace. Scored 1 [Pass](https://cloud.ibm.com/docs/containers?topic=containers-cis-benchmark-119cis-benchmark-remediations-119) Shared 
 5.2.3 Minimize the admission of containers wanting to share the host IPC namespace. Scored 1 [Pass](https://cloud.ibm.com/docs/containers?topic=containers-cis-benchmark-119cis-benchmark-remediations-119) Shared 
 5.2.4 Minimize the admission of containers wanting to share the host network namespace. Scored 1 [Pass](https://cloud.ibm.com/docs/containers?topic=containers-cis-benchmark-119cis-benchmark-remediations-119) Shared 
 5.2.5 Minimize the admission of containers with allowPrivilegeEscalation. Scored 1 [Pass](https://cloud.ibm.com/docs/containers?topic=containers-cis-benchmark-119cis-benchmark-remediations-119) Shared 
 5.2.6 Minimize the admission of root containers. Not Scored 2 [Pass](https://cloud.ibm.com/docs/containers?topic=containers-cis-benchmark-119cis-benchmark-remediations-119) Shared 
 5.2.7 Minimize the admission of containers with the NET_RAW capability. Not Scored 1 [Pass](https://cloud.ibm.com/docs/containers?topic=containers-cis-benchmark-119cis-benchmark-remediations-119) Shared 
 5.2.8 Minimize the admission of containers with added capabilities. Not Scored 1 [Pass](https://cloud.ibm.com/docs/containers?topic=containers-cis-benchmark-119cis-benchmark-remediations-119) Shared
1.2.32 Ensure that the --etcd-cafile option is set as appropriate. Scored 1 Pass IBM 
 1.2.33 Ensure that the --encryption-provider-config option is set as appropriate. Scored 1 [Fail](https://cloud.ibm.com/docs/openshift?topic=openshift-cis-benchmark-48cis-benchmark-remediations-48) Shared 
 1.2.34 Ensure that encryption providers are appropriately configured. Scored 1 [Fail](https://cloud.ibm.com/docs/openshift?topic=openshift-cis-benchmark-48cis-benchmark-remediations-48) Shared 
 1.2.35 Ensure that the API Server makes use of only Strong Cryptographic Ciphers. Not Scored 1 Pass IBM 







 1.3 Controller manager 



Section 1.3 Controller manager benchmark results

 Section Recommendation Scored/Not Scored Level Result Responsibility 

 1.3.1 Ensure that the --terminated-pod-gc-threshold option is set as appropriate. Scored 1 Pass IBM 
 1.3.2 Ensure that the --profiling option is set to false. Scored 1 Pass IBM 
 1.3.3 Ensure that the --use-service-account-credentials option is set to true. Scored 1 Pass IBM 
 1.3.4 Ensure that the --service-account-private-key-file option is set as appropriate. Scored 1 Pass IBM 
 1.3.5 Ensure that the --root-ca-file option is set as appropriate. Scored 1 Pass IBM 
 1.3.6 Ensure that the RotateKubeletServerCertificate option is set to true. Scored 2 Pass IBM 
 1.3.7 Ensure that the --bind-address option is set to 127.0.0.1. Scored 1 Pass IBM 







 1.4 Scheduler 



Section 1.4 Scheduler benchmark results

 Section Recommendation Scored/Not Scored Level Result Responsibility 

 1.4.1 Ensure that the --profiling option is set to false. Scored 1 Pass IBM
1.2.32 Ensure that the --etcd-cafile option is set as appropriate. Scored 1 Pass IBM 
 1.2.33 Ensure that the --encryption-provider-config option is set as appropriate. Scored 1 [Fail](https://cloud.ibm.com/docs/openshift?topic=openshift-cis-benchmark-47cis-benchmark-remediations-47) Shared 
 1.2.34 Ensure that encryption providers are appropriately configured. Scored 1 [Fail](https://cloud.ibm.com/docs/openshift?topic=openshift-cis-benchmark-47cis-benchmark-remediations-47) Shared 
 1.2.35 Ensure that the API Server makes use of only Strong Cryptographic Ciphers. Not Scored 1 Pass IBM 







 1.3 Controller manager 



Section 1.3 Controller manager benchmark results

 Section Recommendation Scored/Not Scored Level Result Responsibility 

 1.3.1 Ensure that the --terminated-pod-gc-threshold option is set as appropriate. Scored 1 Pass IBM 
 1.3.2 Ensure that the --profiling option is set to false. Scored 1 Pass IBM 
 1.3.3 Ensure that the --use-service-account-credentials option is set to true. Scored 1 Pass IBM 
 1.3.4 Ensure that the --service-account-private-key-file option is set as appropriate. Scored 1 Pass IBM 
 1.3.5 Ensure that the --root-ca-file option is set as appropriate. Scored 1 Pass IBM 
 1.3.6 Ensure that the RotateKubeletServerCertificate option is set to true. Scored 2 Pass IBM 
 1.3.7 Ensure that the --bind-address option is set to 127.0.0.1. Scored 1 Pass IBM 







 1.4 Scheduler 



Section 1.4 Scheduler benchmark results

 Section Recommendation Scored/Not Scored Level Result Responsibility 

 1.4.1 Ensure that the --profiling option is set to false. Scored 1 Pass IBM
Not Scored 2 [Pass](https://cloud.ibm.com/docs/openshift?topic=openshift-cis-benchmark-47cis-benchmark-remediations-47) Shared 
 5.2.7 Minimize the admission of containers with the NET_RAW capability. Not Scored 1 [Pass](https://cloud.ibm.com/docs/openshift?topic=openshift-cis-benchmark-47cis-benchmark-remediations-47) Shared 
 5.2.8 Minimize the admission of containers with added capabilities. Not Scored 1 [Pass](https://cloud.ibm.com/docs/openshift?topic=openshift-cis-benchmark-47cis-benchmark-remediations-47) Shared 
 5.2.9 Minimize the admission of containers with capabilities assigned. Not Scored 2 [Pass](https://cloud.ibm.com/docs/openshift?topic=openshift-cis-benchmark-47cis-benchmark-remediations-47) Shared 







 5.3 Network policies and CNI 



Section 5.3 Network policies and CNI benchmark results

 Section Recommendation Scored/Not Scored Level Result Responsibility 

 5.3.1 Ensure that the CNI in use supports network policies. Not Scored 1 Pass IBM 
 5.3.2 Ensure that all namespaces have network policies defined. Scored 2 [Fail](https://cloud.ibm.com/docs/openshift?topic=openshift-cis-benchmark-47cis-benchmark-remediations-47) Shared 







 5.4 Secrets management 



Section 5.4 Secrets management benchmark results

 Section Recommendation Scored/Not Scored Level Result Responsibility 

 5.4.1 Prefer using secrets as files over secrets as environment variables. Not Scored 1 [Fail](https://cloud.ibm.com/docs/openshift?topic=openshift-cis-benchmark-47cis-benchmark-remediations-47) Shared 
 5.4.2 Consider external secret storage.