Avoid using web-hosted manifest for Kubelet
Info
ID: MS-M9032
MITRE mitigation: -
Kubelet can deploy static pods by using manifests that are stored in web accessible locations. If web-hosted manifest are not required, make sure that Kubelet does not run with --manifest-url argument.
Techniques Addressed by Mitigation
| ID | Name | Use |
|---|---|---|
| MS-TA9017 | Static pods | Avoid using web-hosted manifest for Kubelet. |