Workload misconfigurations

Kubernetes node’s Kube-Proxy configuration file owner is not root

Platform(s)

  • N/A

Compliance Frameworks

Description

The kube-proxy kubeconfig file controls various parameters of the kube-proxy service in the worker node. Orca has detected that the kube-proxy's kubeconfig file owner on {K8sNode.Vm} is set to {Vm.K8sKubeProxyConfigs.ConfigFile.Group}:{Vm.K8sKubeProxyConfigs.ConfigFile.UserName}. The file should be owned by root:root.
Need help?

Get a free Security Risk Assessment. Start today

Orca Security Demo Demo the Orca Platform-> In just 10 minutes, you’ll see how Orca Security can revolutionize your cloud security strategy. Watch a recorded demo from a cloud security expert now.