Vulnerabilities
Misconfiguration
Runtime Security
Compliance
Compliance > Kubernetes > CIS - RedHat 1.0 > Master Node Security Configuration >

Scheduler

N/A
Source
Kube Bench
ID
1.4
Version
rh-1.0

1.4 Scheduler

1.4.1 Ensure that the healthz endpoints for the scheduler are protected by RBAC (Manual)

A fix to this issue: https://bugzilla.redhat.com/show_bug.cgi?id=1889488 None required. Profiling is protected by RBAC and cannot be disabled.

1.4.2 Verify that the scheduler API service is protected by authentication and authorization (Manual)

By default, the –bind-address argument is not present, the readinessProbe and livenessProbe arguments are set to 10251 and the port argument is set to 0. Check the status of this issue: https://bugzilla.redhat.com/show_bug.cgi?id=1889488

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.
Copyright © 2023 Aqua Security Software Ltd.   Privacy Policy | Terms of Use