API Server Should Enable The DenyServiceExternalIPs Admission Plugin

More Info:

Verifies that the DenyServiceExternalIPs admission plugin is enabled. This plugin blocks use of Service external IPs, mitigating a known man-in-the-middle vector.

Risk Level

Medium

Address

Security

Compliance Standards

CIS Kubernetes

Triage and Remediation

Remediation

Remediation

Using Console

Refer to the remediation guidance for this control. Detailed console, CLI and Python steps are being generated.

⌘I

​More Info:

​Risk Level

​Address

​Compliance Standards

​Triage and Remediation

​Remediation