API

The scheduler pod specification file ownership should be assigned to root

Docs > Datadog Security > OOTB Rules > The scheduler pod specification file ownership should be assigned to root

Set up the kubernetes integration.

このページは日本語には対応しておりません。随時翻訳に取り組んでいます。翻訳に関してご質問やご意見ございましたら、お気軽にご連絡ください。

Description

The scheduler pod specification file ownership should be set to root:root. The scheduler pod specification file controls various parameters that set the behavior of the kube-scheduler service in the master node. You should set its file ownership to maintain the integrity of the file.

Remediation

Run the following command to adjust the file ownership:

chown root:root /etc/kubernetes/manifests/kube-scheduler.yaml