Skip to main content

More Info:

Do not generally permit containers with capabilities

Risk Level

Low

Address

Security

Compliance Standards

  • CIS Kubernetes

Triage and Remediation

Remediation

Using Console

List the policies in use for each namespace in the cluster, ensure that at least one policyrequires that capabilities are dropped by all containers.

Additional Reading: