Red Hat OpenShift
TMA-OPENSHIFT-1.2.8
Ensure that the admission control plugin AlwaysAdmit is not set
SrednjaNivo 1Ručni pregledopenshift
Opis
Do not allow all requests. The benchmark marks this recommendation Manual.
Kako se proverava
Metod provere: Ručni pregled
Ova preporuka se ne može proveriti automatski. Skeniranje je navodi sa ovim uputstvima kada prosledite --include-manual.
This controller is disabled by default in OpenShift and cannot be enabled. It has also been deprecated by the Kubernetes community as it behaves as if there were no controller. Use the following command to verify the configured admission controllers: oc -n openshift-kube-apiserver get configmap config -o json | jq -r '.data."config.yaml"' | jq '.apiServerArguments."enable-admission-plugins"' The output should not include AlwaysAdmit.
Kako se ispravlja
Metod ispravke: Smernica ili zakrpa infrastrukture
None.
Svojstva
- Operativni sistemi
- Bilo koji
- Oznake
- openshiftapi-server
- Referenca
- CIS Red Hat OpenShift Container Platform Benchmark v2.0.0 - 1.2.8 Ensure that the admission control plugin AlwaysAdmit is not set