API

Kube-proxy configuration file ownership should be assigned to root

Docs > Datadog Security > OOTB Rules > Kube-proxy configuration file ownership should be assigned to root

Set up the kubernetes integration.

このページは日本語には対応しておりません。随時翻訳に取り組んでいます。翻訳に関してご質問やご意見ございましたら、お気軽にご連絡ください。

Description

If kube-proxy is running, ensure that the file ownership of its kubeconfig file is set to root:root. The kube-proxy’s kubeconfig file controls various parameters for the the service in the worker node. You should set its file ownership to maintain the integrity of the file.

Remediation

Run the below command on each worker node:

chown root:root <proxy kubeconfig file>