Skip to main content

More Info:

Do not bind the Controller Manager service to non-loopback insecure addresses.

Risk Level

Critical

Address

Security

Compliance Standards

  • CIS Kubernetes

Triage and Remediation

Remediation

Using Console

Run the following command on the Control Plane node: ps -ef | grep kube-controller-manager Verify that the —bind-address argument is set to 127.0.0.1

Additional Reading: