Best practices

K8S API server configuration with AlwaysAdmit admissions control plugin

Platform(s)
  • Non-platform specific

Compliance Frameworks
  • CCPA
  • ,
  • CPRA
  • ,
  • iso_27001_2022
  • ,
  • iso_27002_2022
  • ,
  • K8s OWASP Top 10
  • ,
  • NIST 800-171
  • ,
  • NIST 800-190
  • ,
  • NIST 800-53
  • ,
  • PDPA
  • ,
  • UK Cyber Essentials

Description

It was found that the API server configuration admission control plugins parameter does not include 'AlwaysAdmit'. An admission controller is a code which being executed after the request authentication and authorization in order to validate it or change it. This admission controller allows all requests without filtering.