1.2.2 Ensure that the --basic-auth-file argument is not set - ClusterOperators

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

Do not use basic authentication.

Rationale:

Basic authentication uses plaintext credentials for authentication. Currently, the basic authentication credentials last indefinitely, and the password cannot be changed without restarting the API server. The basic authentication is currently supported for convenience. Hence, basic authentication should not be used.

Impact:

OpenShift uses tokens and certificates for authentication.

Solution

None required. --basic-auth-file cannot be configured on OpenShift.

Default Value:

By default, --basic-auth-file argument is not set and OAuth authentication is configured.

See Also

https://workbench.cisecurity.org/files/4260