Apply Security Context to Your Pods and Containers

NiskaNivo 2Ručni pregledopenshift

Opis

Apply Security Context to Your Pods and Containers The benchmark marks this recommendation Manual.

Kako se proverava

Metod provere: Ručni pregled

Ova preporuka se ne može proveriti automatski. Skeniranje je navodi sa ovim uputstvima kada prosledite --include-manual.

Review the pod definitions in your cluster and verify that you have security contexts defined as appropriate. OpenShift's Security Context Constraint feature is on by default in OpenShift 4 and applied to all pods deployed. SCC selection is determined by a combination of the values in the securityContext and the rolebindings for the account deploying the pod.

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

Follow the Kubernetes documentation and apply security contexts to your pods. For a suggested list of security contexts, you may refer to the CIS Security Benchmark for Docker Containers.

Svojstva

Operativni sistemi: Bilo koji
Oznake: openshiftpoliciespod-security
Referenca: CIS Red Hat OpenShift Container Platform Benchmark v2.0.0 - 5.7.3 Apply Security Context to Your Pods and Containers