Details

Kubernetes allows alpha API calls within the API server. The alpha features are disabled by default since they are not ready for production and likely to change without notice. These features may also contain security issues that are rectified as the feature matures. To keep the Kubernetes cluster secure and stable, these alpha features must not be used.

Solution

Edit any manifest files that contain the feature-gates setting with AllAlpha set to ‘true’. Set the flag to ‘false’ or remove the AllAlpha setting completely.
(AllAlpha- default=false)

Supportive Information

The following resource is also helpful.

• https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Kubernetes_V1R4_STIG.zip

This security hardening control applies to the following category of controls within NIST 800-53: Access Control.This control applies to the following type of system Unix.

References

• 800-53|AC-3
• CAT|II
• CCI|CCI-000213
• Rule-ID|SV-242400r712556_rule
• STIG-ID|CNTR-K8-000470
• Vuln-ID|V-242400

Source

• Tenable.com/audits