CIS recommends to set the --service-account-lookup parameter to true or remove it from the config file so that the default applies.
This parameter is enabled by default already since kubernetes #44071. Therefore I propose to remove this parameter from the example configuration in the hardening guide.
CIS recommends to set the --service-account-lookup parameter to true or remove it from the config file so that the default applies.
This parameter is enabled by default already since kubernetes #44071. Therefore I propose to remove this parameter from the example configuration in the hardening guide.