An EKS Cluster's kubelet configuration file ownership should be assigned to root

Docs > Plateforme de sécurité Datadog > OOTB Rules > An EKS Cluster's kubelet configuration file ownership should be assigned to root

Cette page n'est pas encore disponible en français, sa traduction est en cours.
Si vous avez des questions ou des retours sur notre projet de traduction actuel, n'hésitez pas à nous contacter.

Description

Ensure that if the kubelet refers to a configuration file with the --config argument. You should set its file ownership to maintain integrity and the file should be owned by root:root.

Remediation

Run the following command to fix the kubelet configuration file’s permissions:

chown root:root /etc/kubernetes/kubelet/kubelet-config.json

Note: The path above is the default location in EKS.