Description

It was found that the argument --bind-address in the Scheduler pod specification file is not set to the IP address ""127.0.0.1"". This argument indicates the IP address with which the Scheduler API service cummunicates. This service provides health and metrics information without an encryption or authentication. Therefore, in order to minimize attack surface, it should be bound to a localhost interface.

• 

  Recommended Mitigation

  It is recommended to edit the Scheduler pod specification file on the master node and set the parameter ""127.0.0.1"" to the --bind-address argument.