More Info:
Disable anonymous requests to the Kubelet server.Risk Level
HighAddress
SecurityCompliance Standards
- CIS Kubernetes
Triage and Remediation
- Remediation
Remediation
Using Console
Using Console
If using a Kubelet configuration file, check that there is an entry for authentication:anonymous: enabled set to false. Run the following command on each node: ps -ef | grep kubelet Verify that the —anonymous-auth argument is set to false. This executable argument may be omitted, provided there is a corresponding entry setto false in the Kubelet config file.