Red Hat OpenShift
TMA-OPENSHIFT-1.2.1
Ensure that anonymous requests are authorized
Descrição
When anonymous requests to the API server are allowed, they must be authorized. The benchmark marks this recommendation Manual.
Como é verificado
Método de auditoria: Revisão manual
OpenShift allows anonymous requests (then authorizes them). OpenShift allows anonymous requests to the API server to support information discovery and webhook integrations. OpenShift provides it's own fully integrated authentication and authorization mechanism. If no access token or certificate is presented, the authentication layer assigns the system:anonymous virtual user and the system:unauthenticated virtual group to the request. This allows the authorization layer to determine which requests, if any, an anonymous user is allowed to make.
Como é corrigido
Método de correção: Orientação ou patch de infraestrutura
None. The default configuration should not be modified.
Propriedades
- Sistemas operacionais
- Qualquer
- Tags
- openshiftapi-server
- Referência
- CIS Red Hat OpenShift Container Platform Benchmark v2.0.0 - 1.2.1 Ensure that anonymous requests are authorized