Skip to content

Avoid using web-hosted manifest for Kubelet

Info

ID: MS-M9032
MITRE mitigation: -

Kubelet can deploy static pods by using manifests that are stored in web accessible locations. If web-hosted manifest are not required, make sure that Kubelet does not run with --manifest-url argument.

Techniques Addressed by Mitigation

ID Name Use
MS-TA9017 Static pods Avoid using web-hosted manifest for Kubelet.