2.2.6 Ensure that the proxy kubeconfig file ownership is set to root:root

Information

If 'kube-proxy' is running, ensure that the file ownership of its kubeconfig file is set to 'root:root'.

Rationale:

The kubeconfig file for 'kube-proxy' controls various parameters for the 'kube-proxy' service in the worker node. You should set its file ownership to maintain the integrity of the file. The file should be owned by 'root:root'.

Solution

Run the below command (based on the file location on your system) on the each worker node. For example,

chown root:root

Impact:

None

See Also

https://workbench.cisecurity.org/files/1788

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CSCv6|5.1

Plugin: Unix

Control ID: 3d57c1e7577ab725f39a9c8961ab03241900df381c25458873cddbd717d115fc