CKS Security Quest · Clean-win mission

Repair manifest permissions

Three minutes. One file. One targeted CIS proof.

CKS-007100 XP

Task

/etc/kubernetes/manifests/kube-controller-manager.yaml
mode=0644 owner=root group=root

On controlplane, back up outside the manifest directory, set mode 0600 without changing ownership, verify both, and rerun only master check 1.1.3.