kubernetes / kubernetes/release
Change kubelet.service permissions to satisfy CIS benchmark
Open
area/release-eng
kind/feature
needs-priority
sig/release
- Dominant language
- Go
- Stars
- 504
- Forks
- 556
- Avg merge
- 18h 43m
- Merged PRs (30d)
- 33
Description
#### What would you like to be added:
On this line: https://github.com/kubernetes/release/blob/f618b2a308bc76e90e987e45ab17c85778dd5993/cmd/krel/templates/latest/kubelet/kubelet.spec#L54
I would like 0644 to be changed to 0600 or 0400
#### Why is this needed:
CIS benchmarks have a check for the kubelet.service file permissions and flags an error if they are not 0600 (or better)
Therefore (presumably) this is a good thing and should be implemented.
Contributor guide
Assessment
This issue has not been assessed yet.