Control: 7.5 Ensure Kubernetes web UI / Dashboard is not enabled
Description
Dashboard is a web-based Kubernetes user interface. It can be used to deploy containerized applications to a Kubernetes cluster, troubleshoot your containerized application, and manage the cluster itself along with its attendant resources. You can use Dashboard to get an overview of applications running on your cluster, as well as for creating or modifying individual Kubernetes resources (such as Deployments, Jobs, DaemonSets, etc). For example, you can scale a Deployment, initiate a rolling update, restart a pod or deploy new applications using a deploy wizard.
Remediation
From Console
- Logon to ACK console.
- Select the target cluster and select the kube-system namespace in the
Namespace
pop-menu. - Input dashboard in the deploy filter bar, make sure there is no result exist after the filter, delete the dashboard deployment by selecting the
Delete
inMore
pop-menu.
Usage
Run the control in your terminal:
powerpipe control run alicloud_compliance.control.cis_v100_7_5
Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run alicloud_compliance.control.cis_v100_7_5 --share
SQL
This control uses a named query:
manual_control