Ensure that Kubernetes Dashboard (Dashboard WebUI) is disabled for your ACK clusters in order to enhance cluster security and prevent potential attack vectors. The Kubernetes Dashboard is a web-based user interface (UI) that provides a visual representation and management capabilities for Kubernetes clusters. It allows users to monitor and interact with the resources within the cluster, such as pods, deployments, and services, through a graphical interface rather than using command-line tools.
Security It's generally recommended to disable the Kubernetes Dashboard when running on ACK clusters due to its security vulnerabilities and the potential for privileged escalation if compromised. The Kubernetes Dashboard runs with a highly privileged Kubernetes service account, granting it access to sensitive cluster resources. This makes it a prime target for attackers seeking to gain unauthorized control over the cluster.
Audit
To determine the Kubernetes Dashboard status for your ACK clusters, perform the following operations:
Getting Kubernetes Dashboard status and configuration information via Alibaba Cloud CLI (aliyun) is not currently supported.Remediation / Resolution
To disable Kubernetes Dashboard (Dashboard WebUI) for your ACK clusters, perform the following operations:
Disabling Kubernetes Dashboard via Alibaba Cloud CLI (aliyun) is not currently supported.