gardener / diki

Apache License 2.0
7 stars 8 forks source link

Implement DISA K8s STIG 242390 for Managed K8s provider #284

Open dimityrmirchev opened 2 months ago

dimityrmirchev commented 2 months ago

What would you like to be added: The rule 242390 The Kubernetes API server must have anonymous authentication disabled. can be implemented for the managedk8s provider by sending a request to the kube-apiserver without providing authentication information. If the request is authenticated for system:anonymous then there is a violation of the rule.

Why is this needed: