More Info:
Restrict kubelet nodes to reading only objects associated with them.Risk Level
MediumAddress
SecurityCompliance Standards
- CIS Kubernetes
Triage and Remediation
- Remediation
Remediation
Using Console
Using Console
Run the following command on the Control Plane node: ps -ef | grep kube-apiserver Verify that the —authorization-mode argument exists and is set to a value to includeNode.