Skip to main content

More Info:

Ensure that the scheduler pod specification file has permissions of 644 or more restrictive.

Risk Level

High

Address

Security

Compliance Standards

  • CIS Kubernetes

Triage and Remediation

Remediation

Using Console

Run the below command (based on the file location on your system) on the ControlPlane node. For example, stat -c %a /etc/kubernetes/manifests/kube-scheduler.yaml Verify that the permissions are 600 or more restrictive.

Additional Reading: