An AKS Cluster's kubelet configuration file ownership should be assigned to root

Documentos > Datadog Security > OOTB Rules > An AKS Cluster's kubelet configuration file ownership should be assigned to root

This page is not yet available in Spanish. We are working on its translation.
If you have any questions or feedback about our current translation project, feel free to reach out to us!

Description

If the kubelet refers to a configuration file with the --config argument, you should set its file ownership to maintain integrity. The file should be owned by root:root.

Remediation

Run the following command to fix the kubelet configuration file’s permissions:

chown root:root /etc/kubernetes/kubelet/kubelet-config.json

Note: The path above is the default location in AKS.