{ “id”: “4.2.2”, “text”: “Ensure that the –authorization-mode argument is not set to AlwaysAllow (Automated)”, “audit”: “/bin/ps -fC \(kubeletbin", "audit_config": "/bin/cat \)kubeletconf”, “tests”: {
"test_items": [
{
"flag": "--authorization-mode",
"path": "{.authorization.mode}",
"compare": {
"op": "nothave",
"value": "AlwaysAllow"
}
}
]
},
“remediation”: “| If using a Kubelet config file, edit the file to set authorization: mode to Webhook. If\n| using executable arguments, edit the kubelet service file\n| $kubeletsvc on each worker node and\n| set the below parameter in KUBELET_AUTHZ_ARGS variable.\n| –authorization-mode=Webhook\n| Based on your system, restart the kubelet service. For example:\n| systemctl daemon-reload\n| systemctl restart kubelet.service”,
“scored”: true
}
内容由零声教学AI助手提供,问题来源于学员提问




