An AKS Cluster's Kubelet should not allow hostname overrides

Docs > Plateforme de sécurité Datadog > OOTB Rules > An AKS Cluster's Kubelet should not allow hostname overrides

Cette page n'est pas encore disponible en français, sa traduction est en cours.
Si vous avez des questions ou des retours sur notre projet de traduction actuel, n'hésitez pas à nous contacter.

Description

Hostnames in the cluster should not be overriden. This could potentially break the TLS setup between Kubelet and the API server. You should set up your kubelet nodes with resolvable FQDNs and avoid overriding the hostnames with IPs.

Remediation

Edit the kubelet service file on each worker node and remove the following parameters are part of the KUBELET_ARGS variable string.

--hostname-override=<any-string>