The kubeconfig file ownership should be assigned to root
이 페이지는 아직 한국어로 제공되지 않습니다. 번역 작업 중입니다.
현재 번역 프로젝트에 대한 질문이나 피드백이 있으신 경우
언제든지 연락주시기 바랍니다.Description
Kubelet kubeconfig file ownership should be assigned to root:root on every EKS worker node. The kubeconfig file (typically located at /var/lib/kubelet/kubeconfig) is used by the kubelet to authenticate to the API server, and restricting its ownership to root preserves its integrity.
Run the below command (based on the file location on your system) on each worker node to set the kubeconfig file ownership to root:root. See the Kubernetes cluster hardening documentation for more detail.
chown root:root /var/lib/kubelet/kubeconfig
Note: The path above is the default location in EKS.
References
