More Info:

The Kubernetes Web UI (Dashboard) has been a historical source of vulnerability and should only be deployed when necessary.

Risk Level

Medium

Address

Security, Reliability, Operational Excellence, Performance Efficiency

Compliance Standards

CISGKE

Triage and Remediation

Remediation

To remediate the misconfiguration of enabling Kubernetes Web UI on GCP, you can follow the below steps using the GCP console:

  1. Open the GCP console and navigate to the Kubernetes Engine page.
  2. Select the cluster that you want to remediate.
  3. Click on the “Actions” drop-down menu and select “Edit”.
  4. Scroll down to the “Add-ons” section and click on the “Disabled” radio button for the “Kubernetes Dashboard” option.
  5. Click on the “Save” button at the bottom of the page to save the changes.
  6. Wait for a few minutes for the changes to take effect.

By following these steps, you will have successfully disabled the Kubernetes Web UI on your GCP cluster, thus remediating the misconfiguration.

Additional Reading: