More Info:
Limit the Node and Pod objects that a kubelet could modify.Risk Level
LowAddress
SecurityCompliance Standards
- CIS Kubernetes
Triage and Remediation
- Remediation
Remediation
Using Console
Using Console
Run the following command on the Control Plane node: ps -ef | grep kube-apiserver Verify that the —enable-admission-plugins argument is set to a value that includesNodeRestriction.