To manage runtimes, nodes, and Kubernetes itself, there needs to be administrative access for administrators and tool-based deployment. Such access is implemented in the form of either Unix sockets or network ports. Mechanisms for the authentication and encryption of administrative access are often present, but not activated by default in all products.
If unauthorised persons access a data network or its nodes, they can execute commands via unprotected administrative access points and impair the availability, confidentiality, and integrity of the data processed there.
- BSI -
Copyright by Bundesamt für Sicherheit in der Informationstechnik (https://www.bsi.bund.de/)