More Info:
Allow Kubelet to manage iptables.Risk Level
HighAddress
SecurityCompliance Standards
- CIS Kubernetes
Triage and Remediation
- Remediation
Remediation
Using Console
Using Console
Run the following command on each node: ps -ef | grep kubelet Verify that if the —make-iptables-util-chains argument exists then it is set to true. If the —make-iptables-util-chains argument does not exist, and there is a Kubeletconfig file specified by —config, verify that the file does not setmakeIPTablesUtilChains to false.