The Container-Optimized OS images that Google Distributed Cloud uses are hardened to meet the Level 1 - Server profile of the Center for Internet Security (CIS) Container-Optimized OS Benchmark. The benchmark provides recommendations for configuring instances that run Container-Optimized OS to support a strong security posture. You can review the benchmark's recommendation levels and the compliance status of Google Distributed Cloud.
Access the benchmark
The CIS Container-Optimized OS Benchmark is available on the CIS website:
- Go to the CIS Benchmarks downloads page.
- Search for CIS Google Container-Optimized OS Benchmark.
- Click Download PDF.
Recommendation levels
The following table describes the recommendation levels for the CIS Container-Optimized OS Benchmark.
| Level | Description |
|---|---|
| Level 1 | Recommendations at this level are meant to be applicable to the majority of environments. |
| Level 2 | Extends the Level 1 profile, resulting in a more stringent security environment. |
Status of Google Distributed Cloud
The Container-Optimized OS images used with Google Distributed Cloud are hardened to meet the CIS Level 1 - Server profile. All Google Distributed Cloud components pass the recommendations for this level.