Restrict update access to the CDI CR

SedangLevel 1Tinjauan manualopenshift-virt

Deskripsi

The CDI object is not namespaced and contains sensitive configuration data for the Containerized Data Importer. The benchmark marks this recommendation Manual; TMAegis reports it as a manual review item with the audit steps.

Cara pemeriksaan

Metode audit: Tinjauan manual

Rekomendasi ini tidak dapat diperiksa secara otomatis. Pemindaian akan menampilkannya beserta petunjuk ini saat Anda memberikan opsi --include-manual.

check who can update the cdi resources: $ oc adm policy who - can update cdi

Cara perbaikan

Metode perbaikan: Panduan atau patch infrastruktur

Assign update access only to approved cdi objects in the cluster.

Properti

Sistem operasi: Apa saja
Tag: openshift-virtmanual-review
Referensi: CIS Red Hat OpenShift Virtual Machine Extension Benchmark v1.0.0 - 1.14 Restrict update access to the CDI CR