Ensure that the Controller Manager kubeconfig file permissions are set to 600 or more restrictive

보통레벨 1수동 검토openshift

설명

Ensure that the kubeconfig file mounted into the Controller Manager has permissions of 600 or more restrictive. The benchmark marks this recommendation Manual.

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

The kubeconfig file for kube-controller-manager is stored in the ConfigMap controller-manager-kubeconfig in the namespace openshift-kube-controller-manager. The kubeconfig file is referenced in the pod via hostpath and is stored in /etc/kubernetes/static-pod-resources/configmaps/controller-manager-kubeconfig/kubeconfig with permissions 600. Run the following command.

조치 방법

조치 방식: 가이드 또는 인프라 패치

There is no remediation for updating the permissions of the kubeconfig file. The file is owned by an OpenShift operator and any changes to the file will result in a degraded cluster state. Please do not attempt to remediate the permissions of this file.

속성

운영 체제: 모두
태그: openshiftcontrol-planefile-permissions
참고 자료: CIS Red Hat OpenShift Container Platform Benchmark v2.0.0 - 1.1.17 Ensure that the Controller Manager kubeconfig file permissions are set to 600 or more restrictive