The scheduler pod specification file ownership should be assigned to root

Documentos > Datadog Security > OOTB Rules > The scheduler pod specification file ownership should be assigned to root

Set up the kubernetes integration.

This page is not yet available in Spanish. We are working on its translation.
If you have any questions or feedback about our current translation project, feel free to reach out to us!

Description

The scheduler pod specification file ownership should be set to root:root. The scheduler pod specification file controls various parameters that set the behavior of the kube-scheduler service in the master node. You should set its file ownership to maintain the integrity of the file.

Remediation

Run the following command to adjust the file ownership:

chown root:root /etc/kubernetes/manifests/kube-scheduler.yaml