Kubelet Hostname Override Is Set
- Query id: bf36b900-b5ef-4828-adb7-70eb543b7cfb
- Query name: Kubelet Hostname Override Is Set
- Platform: Kubernetes
- Severity: Low
- Category: Insecure Configurations
- CWE: 269
- URL: Github
Description¶
Hostnames should not be overrided
Documentation
Code samples¶
Code samples with security vulnerabilities¶
Positive test num. 1 - yaml file
apiVersion: v1
kind: Pod
metadata:
name: command-demo
labels:
purpose: demonstrate-command
spec:
containers:
- name: command-demo-container
image: foo/bar
command: ["kubelet"]
args: ["--hostname-override=host"]
restartPolicy: OnFailure
Positive test num. 2 - yaml file
apiVersion: v1
kind: Pod
metadata:
name: command-demo
labels:
purpose: demonstrate-command
spec:
containers:
- name: command-demo-container
image: foo/bar
command: ["kubelet","--hostname-override=host"]
args: []
restartPolicy: OnFailure