More Info:
The RBAC role cluster-admin provides wide-ranging powers over the environment and should be used only where and when needed.Risk Level
CriticalAddress
SecurityCompliance Standards
- CIS Kubernetes
Triage and Remediation
- Remediation
Remediation
Using Console
Using Console
Obtain a list of the principals who have access to the cluster-admin role by reviewingthe clusterrolebinding output for each role binding that has access to the clusteradmin role.kubectl get clusterrolebindings -o=customcolumns=NAME:.metadata.name,ROLE:.roleRef.name,SUBJECT:.subjects[*].name Review each principal listed and ensure that cluster-admin privilege is required for it.