For AI agents: A markdown version of this page is available at https://docs.datadoghq.com/security/default_rules/def-00k-anc.md. A documentation index is available at /llms.txt.

The scheduler pod specification file ownership should be assigned to root

kubernetes

Description

The scheduler pod specification file ownership should be set to root:root. The scheduler pod specification file controls various parameters that set the behavior of the kube-scheduler service in the master node. You should set its file ownership to maintain the integrity of the file.

Remediation

  1. Run the following command to adjust the file ownership:
    chown root:root /etc/kubernetes/manifests/kube-scheduler.yaml