Kube-proxy configuration file ownership should be assigned to root

Documentos > Datadog Security > OOTB Rules > Kube-proxy configuration file ownership should be assigned to root

Set up the kubernetes integration.

This page is not yet available in Spanish. We are working on its translation.
If you have any questions or feedback about our current translation project, feel free to reach out to us!

Description

If kube-proxy is running, ensure that the file ownership of its kubeconfig file is set to root:root. The kube-proxy’s kubeconfig file controls various parameters for the the service in the worker node. You should set its file ownership to maintain the integrity of the file.

Remediation

Run the below command on each worker node:

chown root:root <proxy kubeconfig file>