More Info:
Ensure that the audit policy created for the cluster covers key security concerns.Risk Level
HighAddress
SecurityCompliance Standards
- CIS Kubernetes
Triage and Remediation
- Remediation
Remediation
Using Console
Using Console
Review the audit policy provided for the cluster and ensure that it covers at least thefollowing areas :-• Access to Secrets managed by the cluster. Care should be taken to only logMetadata for requests to Secrets, ConfigMaps, and TokenReviews, in order toavoid the risk of logging sensitive data.• Modification of pod and deployment objects.• Use of pods/exec, pods/portforward, pods/proxy and services/proxy.For most requests, minimally logging at the Metadata level is recommended (the mostbasic level of logging).