Description

The kubernetes configuration does not set a logging property, which prevents log files from being created. These files are useful for identifying and tracking malicious actions or anomalous behavior. Alternatively, log files do not have sufficient level of detail.

Impact

Perform harmful actions without raising an alert.

Recommendation

Enable auditing on the Kubernetes API Server and set the desired audit log path.

Threat

Authenticated attacker from the Internet.

Expected Remediation Time

⏱️ 60 minutes.

Requirements

Fixes