More Info:
If kube-proxy is running, ensure that the file ownership of its kubeconfig file is set to root:root.Risk Level
LowAddress
SecurityCompliance Standards
- CIS Kubernetes
Triage and Remediation
- Remediation
Remediation
Using Console
Using Console
Find the kubeconfig file being used by kube-proxy by running the following command: ps -ef | grep kube-proxy If kube-proxy is running, get the kubeconfig file location from the —kubeconfigparameter. To perform the audit: Run the below command (based on the file location on your system) on each worker node. For example, stat -c %U:%G
<path><filename> Verify that the ownership is set to root:root.