Add proper remediation info for K3s 4.2.XX sections

[dereknola]

Changes

• Fix newline spacing issues in k3s cis-1.8 versions.
• Add missing "permissions=" output expected for 4.1.3 and 4.1.5
• Add remediation for 4.2.XX sections of the K3s scans
  • Fixes incorrect audit, remove grep for specific flags when it is valid for the flag to not exist
  • Remove "skips" for 4.2.9 in hardened versions, we are skipping checks that we pass and comply with
  • Add K3s specific remediation info for most of the sections.

Verification (Section 4 Only)

Config for k3s (Note the last line is different for psa vs psp)

cluster-init: true
protect-kernel-defaults: true
secrets-encryption: true
kube-controller-manager-arg:
 - 'terminated-pod-gc-threshold=10'
 - 'use-service-account-credentials=true'
kubelet-arg:
 - 'streaming-connection-idle-timeout=5m'
 - 'make-iptables-util-chains=true'
 - 'event-qps=0'
 - "tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305"
kube-apiserver-arg:
 - 'audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log'
 - 'audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml'
 - 'audit-log-maxage=30'
 - 'audit-log-maxbackup=10'
 - 'audit-log-maxsize=100'
 - 'enable-admission-plugins=NodeRestriction,NamespaceLifecycle,ServiceAccount,PodSecurityPolicy'

K3s-cis-1.24-hardened (v1.24.17+k3s1)

old	new

K3s-cis-1.7-hardened (v1.25.16+k3s4)

old	new

K3s-cis-1.8-hardened (v1.28.11+k3s1)

old	new