The Kubernetes PKI directories should be owned by root

Documentos > Datadog Security > OOTB Rules > The Kubernetes PKI directories should be owned by root

Set up the kubernetes integration.

This page is not yet available in Spanish. We are working on its translation.
If you have any questions or feedback about our current translation project, feel free to reach out to us!

Description

Ensure that the Kubernetes PKI directories and subsequent certificate files are owned by root:root. Kubernetes makes use of a number of certificates as part of its operation. You should set the ownership of the directory containing the PKI information and all files in that directory to maintain their integrity.

Remediation

Run the following command to adjust the file ownership:
```
chown -R root:root /etc/kubernetes/pki/
```