Avoid using web-hosted manifest for Kubelet
Info
ID: MS-M9032
MITRE mitigation: -
Kubelet can deploy static pods by using manifests that are stored in web accessible locations. If web-hosted manifest are not required, make sure that Kubelet does not run with --manifest-url
argument.
Techniques Addressed by Mitigation
ID | Name | Use |
---|---|---|
MS-TA9017 | Static pods | Avoid using web-hosted manifest for Kubelet. |