Workload misconfigurations

Kubernetes node’s kubelet configuration file owner is not root

Platform(s)

  • N/A

Compliance Frameworks

Description

The kubelet reads various parameters, including security settings, from a config file. Orca has detected that the kubelet's configuration file permissions on {K8sNode.Vm} is set to {Vm.Content.K8sKubeletConfigs.ConfigFile.PermissionMask}. The file should be have permissions of 644.
Need help?

Get a free Security Risk Assessment. Start today

Orca Security Demo Demo the Orca Platform-> In just 10 minutes, you’ll see how Orca Security can revolutionize your cloud security strategy. Watch a recorded demo from a cloud security expert now.