# Minikube control-plane components — managed by static pod manifests.
Mutelist:
  Accounts:
    "*":
      Checks:
        "controllermanager_disable_profiling":
          Regions: ["*"]
          Resources: ["^kube-controller-manager-minikube$"]
          Description: "Profiling endpoint unreachable from public internet."
        "scheduler_profiling":
          Regions: ["*"]
          Resources: ["^kube-scheduler-minikube$"]
          Description: "Profiling endpoint unreachable from public internet."
        "kubelet_tls_cert_and_key":
          Regions: ["*"]
          Resources: ["^kubelet-config$"]
          Description: "Kubelet API not exposed outside node; minikube auto-generates certificates."