public/rancher-docs
1
0
Fork 0
mirror of https://github.com/rancher/rancher-docs.git synced 2026-09-27 13:38:07 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fix links

Browse Source
This commit is contained in:
Catherine Luse
2021-03-03 23:27:11 -07:00
parent 022b74a4b3
commit 2ffbffba62
23 changed files with 22 additions and 24 deletions
Download Patch File Download Diff File Expand all files Collapse all files
content/k3s/latest/en/security/self_assessment/_index.md
+1 -1
View File
@@ -2040,7 +2040,7 @@ Where access to the Kubernetes API from a pod is required, a specific service ac
The default service account should be configured such that it does not provide a service account token and does not have any explicit rights assignments.
</details>
**Result:** Fail. Currently requires operator intervention See the [Harending Guide](../hardening_guide/_) for details.
**Result:** Fail. Currently requires operator intervention See the [Hardening Guide]({{<baseurl>}}/rancher/k3s/latest/en/security/hardening_guide) for details.
**Audit:**
For each namespace in the cluster, review the rights assigned to the default service account and ensure that it has no roles or cluster roles bound to it apart from the defaults. Additionally ensure that the automountServiceAccountToken: false setting is in place for each default service account.