Ensure that the Kubernetes PKI certificate file permissions are set to 644 or more restrictive

HighLevel 1Manual reviewkubernetes

Description

Ensure that Kubernetes PKI certificate files have permissions of 644 or more restrictive. The benchmark marks this recommendation Manual.

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

Run the below command (based on the file location on your system) on the Control Plane node. For example, stat -c '%a' /etc/kubernetes/pki/*.crt Verify that the permissions are 644 or more restrictive. or ls -l /etc/kubernetes/pki/*.crt Verify -rw------

How it is fixed

Fix method: Guidance or infrastructure patch

Run the below command (based on the file location on your system) on the Control Plane node. For example, chmod -R 644 /etc/kubernetes/pki/*.crt

Properties

Operating systems: Any
Tags: kubernetescontrol-planefile-permissions
Reference: CIS Kubernetes Benchmark v2.1.0 - 1.1.20 Ensure that the Kubernetes PKI certificate file permissions are set to 644 or more restrictive