public/rancher-docs
1
0 Fork 0
mirror of https://github.com/rancher/rancher-docs.git synced 2026-11-10 18:50:45 +00:00
Code Issues Packages Projects Releases Wiki Activity

Enclose in backticks so <&tag> aren't processed as HTML tags - 3

Browse Source
This commit is contained in:
Billy Tat committed 2022-07-18 18:33:34 -07:00
1 parent 4088a2d716
commit 5dc3b086e0
9 files changed
+59 -59
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

docs/en/security/hardening-guides/rke-1.6-benchmark-2.6/rke-1.6-benchmark-2.6.md
+3 -3
View File
@@ -562,7 +562,7 @@ root 121142 121120 7 12:27 ? 00:06:27 kube-apiserver --audit-log-maxsize=100 --e
**Remediation:**
Follow the documentation and configure alternate mechanisms for authentication. Then,
edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml
on the master node and remove the --basic-auth-file=<filename> parameter.
on the master node and remove the `--basic-auth-file=<filename>` parameter.
**Audit:**
@@ -590,7 +590,7 @@ root 121142 121120 7 12:27 ? 00:06:27 kube-apiserver --audit-log-maxsize=100 --e
**Remediation:**
Follow the documentation and configure alternate mechanisms for authentication. Then,
edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml
on the master node and remove the --token-auth-file=<filename> parameter.
on the master node and remove the `--token-auth-file=<filename>` parameter.
**Audit:**
@@ -2177,7 +2177,7 @@ if test -e $CAFILE; then stat -c permissions=%a $CAFILE; fi
**Remediation:**
Run the following command to modify the ownership of the --client-ca-file.
chown root:root <filename>
`chown root:root <filename>`
**Audit Script:** `check_cafile_ownership.sh`
docs/en/security/hardening-guides/rke2-1.6-benchmark-2.6/rke2-1.6-benchmark-2.6.md
+3 -3
View File
@@ -754,7 +754,7 @@ on the master node and set the below parameter.
**Remediation:**
Follow the documentation and configure alternate mechanisms for authentication. Then,
edit the API server pod specification file /var/lib/rancher/rke2/agent/pod-manifests/kube-apiserver.yaml
on the master node and remove the --basic-auth-file=<filename> parameter.
on the master node and remove the `--basic-auth-file=<filename>` parameter.
**Audit:**
@@ -782,7 +782,7 @@ root 5275 5222 15 14:58 ? 00:01:26 kube-apiserver --audit-policy-file=/etc/ranch
**Remediation:**
Follow the documentation and configure alternate mechanisms for authentication. Then,
edit the API server pod specification file /var/lib/rancher/rke2/agent/pod-manifests/kube-apiserver.yaml
on the master node and remove the --token-auth-file=<filename> parameter.
on the master node and remove the `--token-auth-file=<filename>` parameter.
**Audit:**
@@ -2273,7 +2273,7 @@ stat -c %a /var/lib/rancher/rke2/server/tls/server-ca.crt
**Remediation:**
Run the following command to modify the ownership of the --client-ca-file.
chown root:roset: trueot <filename>
`chown root:roset: trueot <filename>`
**Audit:**