More Info:
If kube-proxy is running, and if it is using a file-based kubeconfig file, ensure that the proxy kubeconfig file has permissions of 644 or more restrictive.Risk Level
MediumAddress
SecurityCompliance Standards
- CIS Kubernetes
Triage and Remediation
- Remediation
Remediation
Using Console
Using Console
Find the kubeconfig file being used by kube-proxy by running the following command: ps -ef | grep kube-proxy If kube-proxy is running, get the kubeconfig file location from the —kubeconfigparameter. To perform the audit: Run the below command (based on the file location on your system) on each worker node. For example, stat -c %a
<path><filename> Verify that a file is specified and it exists with permissions are 600 or more restrictive.