Controller Manager Should Use Individual Service Account Credentials

More Info:

Verifies that —use-service-account-credentials is set to true so each controller uses its own service account, enabling least-privilege RBAC for control loops.

Risk Level

High

Address

Security

Compliance Standards

CIS Kubernetes

Triage and Remediation

Remediation

Remediation

Using Console

Refer to the remediation guidance for this control. Detailed console, CLI and Python steps are being generated.

⌘I

​More Info:

​Risk Level

​Address

​Compliance Standards

​Triage and Remediation

​Remediation