More Info:
Protect tuned kernel parameters from overriding kubelet default kernel parameter values.Risk Level
HighAddress
SecurityCompliance Standards
- CIS Kubernetes
Triage and Remediation
- Remediation
Remediation
Using Console
Using Console
Run the following command on each node: ps -ef | grep kubelet Verify that the —protect-kernel-defaults argument is set to true. If the —protect-kernel-defaults argument is not present, check that there is a Kubeletconfig file specified by —config, and that the file sets protectKernelDefaults to true.