Ensure Kubernetes web UI / Dashboard is not enabled

СреднийУровень 1Ручная проверкаalibaba

Описание

Dashboard is a web-based Kubernetes user interface. It can be used to deploy containerized applications to a Kubernetes cluster, troubleshoot your containerized application, and manage the cluster itself along with its attendant resources. You should disable the Kubernetes Web UI (Dashboard) when running on Kubernetes Engine. The Kubernetes Web UI (Dashboard) is backed by a highly privileged Kubernetes Service Account. Reported as a manual review item: the benchmark audit needs console review or organisational judgement.

Как проверяется

Метод проверки: Ручная проверка

Эту рекомендацию нельзя проверить автоматически. Сканирование выводит её вместе с этими инструкциями при указании флага --include-manual.

Using the management console: 1. Logon to ACK console 2. Select the target cluster and select the kube-system namespace in the Namespace pop-menu 3. Input dashboard in the deploy filter bar, and make sure there is no result exist after the filter.

Как исправляется

Метод исправления: Рекомендация или патч инфраструктуры

Using the management console: 1. Logon to ACK console 2. Select the target cluster and select the kube-system namespace in the Namespace pop-menu 3. Input dashboard in the deploy filter bar, make sure there is no result exist after the filter, delete the dashboard deployment by selecting the Delete in More pop-menu.

Свойства

Операционные системы: Любая
Теги: alibabaack
Источник: CIS Alibaba Cloud Foundation Benchmark v2.0.1 - 7.5 Ensure Kubernetes web UI / Dashboard is not enabled