Restrict update access to the CDI CR

SrednjaNivo 1Ručni pregledopenshift-virt

Opis

The CDI object is not namespaced and contains sensitive configuration data for the Containerized Data Importer. The benchmark marks this recommendation Manual; TMAegis reports it as a manual review item with the audit steps.

Kako se proverava

Metod provere: Ručni pregled

Ova preporuka se ne može proveriti automatski. Skeniranje je navodi sa ovim uputstvima kada prosledite --include-manual.

check who can update the cdi resources: $ oc adm policy who - can update cdi

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

Assign update access only to approved cdi objects in the cluster.

Svojstva

Operativni sistemi: Bilo koji
Oznake: openshift-virtmanual-review
Referenca: CIS Red Hat OpenShift Virtual Machine Extension Benchmark v1.0.0 - 1.14 Restrict update access to the CDI CR