Ensure that Docker's secret management commands are used for managing secrets in a swarm cluster

高レベル 1手動レビューdocker

説明

You should use Docker's in-built secret management command for control of secrets. Docker has various commands for managing secrets in a swarm cluster. Reported as a manual review item: the audit needs a site-specific judgement.

チェック方法

監査方法: 手動レビュー

この推奨事項は自動ではチェックできません。--include-manual を指定すると、スキャン結果にこの手順付きで一覧表示されます。

On a swarm manager node, you should run the command below and ensure docker secret management is used in your environment where this is in line with your IT security policy. docker secret ls Expected state: You should follow the docker secret documentation and use it to manage secrets effectively.

修正方法

修正方法: ガイダンスまたは IaC パッチ

You should follow the docker secret documentation and use it to manage secrets effectively.

プロパティ

オペレーティングシステム: すべて
タグ: dockermanual
参照: CIS Docker Benchmark v1.9.0 - 7.4 Ensure that Docker's secret management commands are used for managing secrets in a swarm cluster