documentation_complete: true


title: 'Verify User Who Owns The OpenShift Admin Kubeconfig File'

description: '{{{ describe_file_owner(file="/etc/kubernetes/kubeconfig", owner="root") }}}'

rationale: |-
    The <tt>/etc/kubernetes/kubeconfig</tt> file contains information about the administrative configuration of the
    OpenShift cluster that is configured on the system. Protection of this file is
    critical for OpenShift security.

severity: medium

#identifiers:
#    cce@ocp4: 80633-1

references:
    cis@ocp4: 1.1.14

ocil_clause: '{{{ ocil_clause_file_owner(file="/etc/kubernetes/kubeconfig", owner="root") }}}'

ocil: |-
    {{{ ocil_file_owner(file="/etc/kubernetes/kubeconfig", owner="root") }}}

#template:
#    name: file_owner
#    vars:
#        filepath: /etc/kubernetes/kubeconfig
#        uid_or_name: '0'
