Skip to content
ATO Pathways
Log In
Overview
Search
Catalogs
SCAP
OSCAL
Catalogs
Profiles
Documents
References
Knowledge Base
Platform Documentation
Compliance Dictionary
Platform Changelog
About
Catalogs
XCCDF
Guide to the Secure Configuration of Red Hat OpenShift Container Platform 4
Kubernetes Settings
OpenShift - Kubernetes - Scheduler Settings
OpenShift - Kubernetes - Scheduler Settings
An XCCDF Group - A logical subset of the XCCDF Benchmark
Details
Profiles
Prose
OpenShift - Kubernetes - Scheduler Settings
2 Rules
Contains evaluations for kube-scheduler configuration settings.
Kube scheduler config filter
Kube scheduler filter
Kube scheduler config file path
Kube scheduler config file path
Ensure that the bind-address parameter is not used
Medium Severity
The Scheduler API service which runs on port 10251/TCP by default is used for health and metrics information and is available without authentication or encryption. As such it should only be bound to a localhost interface, to minimize the cluster's attack surface.
Ensure that the port parameter is zero
Medium Severity
The Scheduler API service which runs on port 10251/TCP by default is used for health and metrics information and is available without authentication or encryption. As such it should only be bound to a localhost interface, to minimize the cluster's attack surface.