Skip to content
ATO Pathways
Log In
Overview
Search
Catalogs
SCAP
OSCAL
Catalogs
Profiles
Documents
References
Knowledge Base
Platform Documentation
Compliance Dictionary
Platform Changelog
About
Catalogs
XCCDF
Guide to the Secure Configuration of Red Hat OpenShift Container Platform 4
Kubernetes Settings
OpenShift - Kubernetes - Scheduler Settings
Ensure that the bind-address parameter is not used
Ensure that the bind-address parameter is not used
An XCCDF Rule
Details
Profiles
Prose
Ensure that the bind-address parameter is not used
Medium Severity
The Scheduler API service which runs on port 10251/TCP by default is used for health and metrics information and is available without authentication or encryption. As such it should only be bound to a localhost interface, to minimize the cluster's attack surface.