575 B
575 B
CKS-008 — Correct manifest ownership
Domain: 1.2 CIS benchmark review
Time: 2 minutes · Reward: 100 XP + topic bonus
Task
On controlplane, check 1.1.4 fails:
/etc/kubernetes/manifests/kube-scheduler.yaml mode=0600 owner=root group=adm
Required commands:
- back up outside the manifest directory;
- change ownership to
root:rootwithout changing mode; - verify numeric mode and
owner:group; - rerun only master check
1.1.4.
Section B — scored answer
# Your four commands
Say Grade CKS-008 when saved.