Verify Permissions on the Kube Scheduler Pod Specification File

Description

To properly set the permissions of /etc/kubernetes/static-pod-resources/kube-scheduler-pod.yaml, run the command:

$ sudo chmod 0600 /etc/kubernetes/static-pod-resources/kube-scheduler-pod.yaml

Rationale

If the Kube specification file is writable by a group-owner or the world the risk of its compromise is increased. The file contains the configuration of an OpenShift scheduler that is configured on the system. Protection of this file is critical for OpenShift security.