CKS Security Quest · API access

Protect admin credentials

Three commands to secure a high-privilege kubeconfig.

CKS-0192 minutes

Task

/etc/kubernetes/admin.conf
mode=0644 owner=root group=root
  1. Back up to /root/admin.conf.backup.
  2. Set mode 0600 only.
  3. Verify numeric mode and owner:group.