Skip to main content

More Info:

Do not always authorize all requests.

Risk Level

High

Address

Security

Compliance Standards

  • CIS Kubernetes

Triage and Remediation

Remediation

Using Console

Run the following command on the Control Plane node: ps -ef | grep kube-apiserver Verify that the —authorization-mode argument exists and is not set to AlwaysAllow.

Additional Reading: