Kubelet Authorization Mode Not Set To AlwaysAllow - Cloudanix

More Info:

The kubelet —authorization-mode must not be AlwaysAllow, which would authorize every request. Use Webhook so requests are properly authorized.

Risk Level

Critical

Address

Security

Compliance Standards

CIS AKS

Triage and Remediation

Remediation

Remediation

Using Console

Refer to the remediation guidance for this control. Detailed console, CLI and Python steps are being generated.

⌘I