Kubelet nodes should only be authorized to read objects they are associated with

Docs > Datadog Security > OOTB Rules > Kubelet nodes should only be authorized to read objects they are associated with

Set up the kubernetes integration.

Description

Kubelet nodes should only read objects associated to them. The Node authorization mode only allows kubelets to read Secret, ConfigMap, PersistentVolume, and PersistentVolumeClaim objects associated with their nodes.

Remediation

Edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the master node, and set the --authorization-mode parameter to a value that includes Node. For example, --authorization-mode=Node,RBAC.