<p>We tried to harden the gke optimized image (gke-1.15.11) for our cluster. We took an ssh into the node instance and made the cis porposed changes in the <code>/home/kubernetes/kubelet-config.yaml</code> file and ran kubebench to check if all the conditions have passed around 8 condtions failed these where the exact conditions we changed in the file. But, then we made the exact argument changes in <code>/etc/default/kubernetes</code> and ran <code>kubebench</code> again the conditions passed. But, when we restarted the instance we all the changes we made in the <code>/ect/default/kubernetes</code> file where gone. Can someone let me know where we are going wrong or is there any other path where we have to make the cis benchmark suggested entries </p>

Hariharan Chandrasekar
<p>GKE doesn't support user-provided node images as of April 2020. <a href="https://cloud.google.com/kubernetes-engine/docs/concepts/node-images#modifications" rel="nofollow noreferrer">Recommended option</a> is to create your own <code>DaemonSet</code> with host filesystem writes and/or host services restart to propagate all the required changes.</p>
