More Info:
Do not allow all requests. Enable explicit authorization.Risk Level
MediumAddress
SecurityCompliance Standards
- CIS Kubernetes
Triage and Remediation
- Remediation
Remediation
Using Console
Using Console
Run the following command on each node: ps -ef | grep kubelet If the —authorization-mode argument is present check that it is not set to AlwaysAllow.If it is not present check that there is a Kubelet config file specified by —config, andthat file sets authorization: mode to something other than AlwaysAllow.It is also possible to review the running configuration of a Kubelet via the /configzendpoint on the Kubelet API port (typically 10250/TCP). Accessing these with appropriatecredentials will provide details of the Kubelets configuration.