Kubelet nodes should only be authorized to read objects they are associated with

Documentos > Datadog Security > OOTB Rules > Kubelet nodes should only be authorized to read objects they are associated with

Set up the kubernetes integration.

Esta página aún no está disponible en español. Estamos trabajando en su traducción.
Si tienes alguna pregunta o comentario sobre nuestro actual proyecto de traducción, no dudes en ponerte en contacto con nosotros.

Description

Kubelet nodes should only read objects associated to them. The Node authorization mode only allows kubelets to read Secret, ConfigMap, PersistentVolume, and PersistentVolumeClaim objects associated with their nodes.

Remediation

Edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the master node, and set the --authorization-mode parameter to a value that includes Node. For example, --authorization-mode=Node,RBAC.