Kubelet configuration file ownership should be assigned to root

Documentos > Datadog Security > OOTB Rules > Kubelet configuration file ownership should be assigned to root

This page is not yet available in Spanish. We are working on its translation.
If you have any questions or feedback about our current translation project, feel free to reach out to us!

Description

Ensure that the file ownership of the kubelet’s kubeconfig file is set to root:root. You should set its file ownership to maintain integrity.

Remediation

Run the following command to fix the kubelet configuration file’s ownership:

chown root:root /var/lib/kubelet/kubeconfig

Note: The path above is the default location in EKS.