Mirantis Kubernetes Engine Security Technical Implementation Guide

The Mirantis Kubernetes Engine Security Technical Implementation Guide (V2 R1) has 44 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

44STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R1

CurrentPublished Wed Jul 24 2024

MSR telemetry must be disabled.

Mirantis Kubernetes Engine Security Technical Implementation Guide

Assessment Title

Rule Text

MSR telemetry must be disabled.

Description

Discussion Text

MSR provides a telemetry service that automatically records and transmits data to Mirantis through an encrypted channel for monitoring and analysis purposes. While this channel is secure, it introduces an attack vector and must be disabled.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-260919

Rule

SV-260919r966114_rule

Severity

medium

Rule Version

CNTR-MK-000510

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

If MSR is not being utilized, this is Not Applicable.

Verify that usage and API analytics tracking is disabled in MSR.

Log in to the MSR web UI and navigate to System >> General Tab. Scroll to the "Analytics" section.

If the "Send data" option is enabled, this is a finding.

Implementation Procedure

Fix Text

If MSR is not being utilized, this is Not Applicable.

Disable usage and API analytics tracking in MSR.

Log in to the MSR web UI and navigate to System >> General Tab. Scroll to the "Analytics" section.

Click the "Send data" slider to disable this capability.

STIG check 17 of 44 in the Mirantis Kubernetes Engine STIG checklist

← Previous · V-260918MKE telemetry must be disabled.Next · V-260920 →For MKE's deployed on an Ubuntu host operating system, the AppArmor profile must be enabled.