Ensure that the admission control plugin ServiceAccount is set

SrednjaNivo 1Ručni pregledopenshift

Opis

Automate service accounts management. The benchmark marks this recommendation Manual.

Kako se proverava

Metod provere: Ručni pregled

Ova preporuka se ne može proveriti automatski. Skeniranje je navodi sa ovim uputstvima kada prosledite --include-manual.

The ServiceAccount admission control plugin is enabled by default. Every service account has an associated user name that can be granted roles, just like a regular user. The user name for each service account is derived from its project and the name of the service account. Service accounts are required in each project to run builds, deployments, and other pods. The default service accounts that are automatically created for each project are isolated by the project namespace.

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

Configure the ServiceAccount admission controller.

Svojstva

Operativni sistemi: Bilo koji
Oznake: openshiftapi-server
Referenca: CIS Red Hat OpenShift Container Platform Benchmark v2.0.0 - 1.2.10 Ensure that the admission control plugin ServiceAccount is set