28 lines
575 B
Markdown
28 lines
575 B
Markdown
# CKS-008 — Correct manifest ownership
|
|
|
|
Domain: **1.2 CIS benchmark review**
|
|
Time: **2 minutes** · Reward: **100 XP + topic bonus**
|
|
|
|
## Task
|
|
|
|
On `controlplane`, check `1.1.4` fails:
|
|
|
|
```text
|
|
/etc/kubernetes/manifests/kube-scheduler.yaml mode=0600 owner=root group=adm
|
|
```
|
|
|
|
Required commands:
|
|
|
|
- back up outside the manifest directory;
|
|
- change ownership to `root:root` without changing mode;
|
|
- verify numeric mode and `owner:group`;
|
|
- rerun only master check `1.1.4`.
|
|
|
|
## Section B — scored answer
|
|
|
|
```bash
|
|
# Your four commands
|
|
```
|
|
|
|
Say **Grade CKS-008** when saved.
|