OCI OKE Should Limit Default Service Account Usage

More Info:

Workloads should not run under the namespaces default ServiceAccount. Mounting tokens from the default SA to every pod blurs blast-radius and breaks per-workload least privilege.

Risk Level

Medium

Address

Compliance, Security

Compliance Standards

CIS OKE

Triage and Remediation

Remediation

Remediation

Using Console

Refer to the remediation guidance for this control. Detailed console, CLI and Python steps are being generated.

⌘I

​More Info:

​Risk Level

​Address

​Compliance Standards

​Triage and Remediation

​Remediation