lacework-global-732
Set the kubelet configuration file ownership to root:root (Automated)
Description
Ensure that if the kubelet refers to a configuration file with the --config
argument, that root:root
owns the file.
Remediation
Run the following command (using the kubelet config file location):
chown root:root /home/kubernetes/kubelet-config.yaml
References
https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/
https://cloud.google.com/kubernetes-engine/docs/concepts/cis-benchmarks