Detections
Analytics
CNTR-K8-002700 - Kubernetes must remove old components after updated versions have been installed.
Information
Previous versions of Kubernetes components that are not removed after updates have been installed may be exploited by adversaries by allowing the vulnerabilities to still exist within the cluster. It is important for Kubernetes to remove old pods when newer pods are created using new images to always be at the desired security state.Solution
Remove any old pods that are using older images. On the Control Plane, run the command:kubectl delete pod podname
(Note: "podname" is the name of the pod to delete.)
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Kubernetes_V2R6_STIG.zip
Item Details
Audit Name: DISA Kubernetes STIG v2r6
Category: SYSTEM AND INFORMATION INTEGRITY
References: 800-53|SI-2(6), CAT|II, CCI|CCI-002617, Rule-ID|SV-242442r1188293_rule, STIG-ID|CNTR-K8-002700, Vuln-ID|V-242442
Plugin: Unix
Control ID: eac7bfbc5a76a7f5f9e92fdcaf1841f1f99c3f0d9e1446f339fdf42df22c8dcc