Red Hat OpenShift
TMA-OPENSHIFT-3.2.2
Ensure that the audit policy covers key security concerns
Descrição
Ensure that the audit policy created for the cluster covers key security concerns. The benchmark marks this recommendation Manual.
Como é verificado
Método de auditoria: Revisão manual
Review the audit policy provided for the cluster and ensure that it covers the following areas: • The use of sensitive resources like Secrets, ConfigMaps, and TokenReviews are logged at the Metadata level • Modifications to pods and deployments are logged at the Request level • The use of pods/exec, pods/portforward, pods/proxy, and services/proxy are at least logged at the Metadata level For most requests, minimally logging at the Metadata level is recommended (the most basic level of logging).
Como é corrigido
Método de correção: Orientação ou patch de infraestrutura
Update the audit log policy profile to use WriteRequestBodies.
Propriedades
- Sistemas operacionais
- Qualquer
- Tags
- openshiftcontrol-planelogging
- Referência
- CIS Red Hat OpenShift Container Platform Benchmark v2.0.0 - 3.2.2 Ensure that the audit policy covers key security concerns