Rancher RKE2 must remove old components after updated versions have been installed.
An XCCDF Rule
Description
<VulnDiscussion>Previous versions of Rancher RKE2 components that are not removed after updates have been installed may be exploited by adversaries by causing older components to execute which contain vulnerabilities. When these components are deleted, the likelihood of this happening is removed.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>
- ID
- SV-254574r961677_rule
- Severity
- Medium
- References
- Updated
Remediation - Manual Procedure
Remove any old pods that are using older images. On the RKE2 Control Plane, run the command:
kubectl delete pod podname
(Note: "podname" is the name of the pod to delete.)
Run the command: