CKS Security Quest · Boss gate

Correct manifest ownership

Two minutes. Four commands. Unlock Ingress TLS.

CKS-008250 XP available

Task

/etc/kubernetes/manifests/kube-scheduler.yaml
mode=0600 owner=root group=adm
  1. Back up outside the manifest directory.
  2. Set owner and group to root without changing mode.
  3. Verify numeric mode and owner:group.
  4. Rerun only master check 1.1.4.