Information
Ensure that the admin.conf file has permissions of 600 or more restrictive.
Rationale:
The admin.conf is the administrator kubeconfig file defining various settings for the administration of the cluster. You should restrict its file permissions to maintain the integrity of the file. The file should be writable by only the administrators on the system.
Impact:
None.
NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.
Solution
Execute the command below:
chmod 600 /etc/kubernetes/kubeconfig/admin.config
Default Value:
By default, in OpenShift 4, kubeconfig has permissions of 644.