Skip to main content

More Info:

Ensure that the etcd data directory ownership is set to etcd:etcd

Risk Level

Medium

Address

Security

Compliance Standards

  • CIS Kubernetes

Triage and Remediation

Remediation

Using Console

On the etcd server node, get the etcd data directory, passed as an argument —datadir, from the below command: ps -ef | grep etcd Run the below command (based on the etcd data directory found above). For example, stat -c %U:%G /var/lib/etcd Verify that the ownership is set to etcd:etcd.

Additional Reading: