Description

Kubernetes default configuration is overly permissive, allowing users to escalate privileges or execute commands as privileged users.

Impact

Gain total control over one or more PoDs.

Recommendation

Set strict security policy disabling potentially harmful actions and restricting the user permissions.

Threat

Authenticated attacker with local access to PoD or container.

Expected Remediation Time

⏱️ 30 minutes.

Details

https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted https://kubernetes.io/docs/tasks/configure-pod-container/security-context/

Requirements

Fixes