Back

Configure the "use-service-account-credentials" argument to organizational standards.


CONTROL ID
14594
CONTROL TYPE
Configuration
CLASSIFICATION
Preventive

SUPPORTING AND SUPPORTED CONTROLS



This Control directly supports the implied Control(s):
  • Configure "Kubernetes" to organizational standards., CC ID: 14528

There are no implementation support Controls.


SELECTED AUTHORITY DOCUMENTS COMPLIED WITH



  • Ensure that the --use-service-account-credentials argument is set to true Description: Use individual service account credentials for each controller. Rationale: The controller manager creates a service account per controller in the `kube-system` namespace, generates a credential for it, and builds … (1.3.3, The Center for Internet Security Kubernetes Level 1 Master Node Benchmark, v 1.6.0)
  • Ensure that the --use-service-account-credentials argument is set to true Description: Use individual service account credentials for each controller. Rationale: The controller manager creates a service account per controller in the `kube-system` namespace, generates a credential for it, and builds … (1.3.3, The Center for Internet Security Kubernetes Level 2 Master Node Benchmark, v 1.6.0)