Skip to main content

More Info:

Ensure that the API server pod specification file ownership is set to root:root

Risk Level

Low

Address

Security

Compliance Standards

  • CIS Kubernetes

Triage and Remediation

Remediation

Using Console

Run the below command (based on the file location on your system) on the ControlPlane node. For example, stat -c %U:%G /etc/kubernetes/manifests/kube-apiserver.yaml Verify that the ownership is set to root:root

Additional Reading: