Ensure Use Service Account Credentials Argument Is Enabled

More Info:

Use individual service account credentials for each controller

Risk Level

High

Address

Security

Compliance Standards

CIS Kubernetes

Triage and Remediation

Remediation

Remediation

Using Console

Run the following command on the Control Plane node: ps -ef | grep kube-controller-manager Verify that the —use-service-account-credentials argument is set to true.

Additional Reading:

https://github.com/kubernetes/kubernetes/blob/release-1.6/plugin/pkg/auth/authorizer/rbac/bootstrappolicy/testdata/controller-roles.yaml

⌘I

​More Info:

​Risk Level

​Address

​Compliance Standards

​Triage and Remediation

​Remediation

​Additional Reading: