Best practices

Kubernetes Controller Manager –profiling argument is not set to false

Risk Level

Informational (4)

Platform(s)
  • N/A

Compliance Frameworks

Description

It was found that the argument --profiling in the Controller Manager configuration file is not set to False. Profiling is used to identify performance bottlenecks. When enabled, the feature can be exploited by a malicious actor to uncover system and program details.
  • Recommended Mitigation

    It is recommended to edit the Controller Manager configuration file on the master node and set the parameter ""False"" to the --profiling argument.