N/A
Source
Kube Bench
ID
2.1
Version
eks-stig-kubernetes-v1r6

2.1 DISA Category Code I

V-242390 The Kubernetes API server must have anonymous authentication disabled (Automated)

If using a Kubelet config file, edit $kubeletconf to set authentication: anonymous: enabled to false. If using executable arguments, edit the kubelet service file $kubeletsvc on each worker node and set the below parameter in KUBELET_SYSTEM_PODS_ARGS variable. –anonymous-auth=false Based on your system, restart the kubelet service. For example: systemctl daemon-reload systemctl restart kubelet.service

V-242400 The Kubernetes API server must have Alpha APIs disabled (Automated)

Edit any manifest files or $kubeletconf that contain the feature-gates setting with AllAlpha set to “true”. Set the flag to “false” or remove the “AllAlpha” setting completely. Restart the kubelet service if the kubelet config file if the kubelet config file is changed.