Ensure Kubernetes web UI / Dashboard is not enabled

MoyenneNiveau 1Revue manuellealibaba

Description

Dashboard is a web-based Kubernetes user interface. It can be used to deploy containerized applications to a Kubernetes cluster, troubleshoot your containerized application, and manage the cluster itself along with its attendant resources. You should disable the Kubernetes Web UI (Dashboard) when running on Kubernetes Engine. The Kubernetes Web UI (Dashboard) is backed by a highly privileged Kubernetes Service Account. Reported as a manual review item: the benchmark audit needs console review or organisational judgement.

Méthode de vérification

Méthode d'audit: Revue manuelle

Cette recommandation ne peut pas être vérifiée automatiquement. Une analyse la liste avec ces instructions lorsque vous passez --include-manual.

Using the management console: 1. Logon to ACK console 2. Select the target cluster and select the kube-system namespace in the Namespace pop-menu 3. Input dashboard in the deploy filter bar, and make sure there is no result exist after the filter.

Méthode de correction

Méthode de correction: Recommandation ou correctif d'infrastructure

Using the management console: 1. Logon to ACK console 2. Select the target cluster and select the kube-system namespace in the Namespace pop-menu 3. Input dashboard in the deploy filter bar, make sure there is no result exist after the filter, delete the dashboard deployment by selecting the Delete in More pop-menu.

Propriétés

Systèmes d'exploitation: Tous
Étiquettes: alibabaack
Référence: CIS Alibaba Cloud Foundation Benchmark v2.0.1 - 7.5 Ensure Kubernetes web UI / Dashboard is not enabled