← Back to Mirantis Kubernetes Engine Security Technical Implementation Guide

V-260918

CAT II (Medium)

MKE telemetry must be disabled.

Rule ID

SV-260918r966111_rule

STIG

Mirantis Kubernetes Engine Security Technical Implementation Guide

Version

V2R1

CCIs

CCI-000381

Discussion

MKE provides a telemetry service that automatically records and transmits data to Mirantis through an encrypted channel for monitoring and analysis purposes. While this channel is secure, it introduces an attack vector and must be disabled.

Check Content

Verify that usage and API analytics tracking is disabled in MKE.

Log in to the MKE web UI and navigate to admin >> Admin Settings >> Usage.

Verify the "Enable hourly usage reporting" and "Enable API and UI tracking" options are both unchecked.

If either box is checked, this is a finding.

Fix Text

Disable usage and API analytics tracking in MKE.

Log in to the MKE web UI and navigate to admin >> Admin Settings >> Usage.

Uncheck both the "Enable hourly usage reporting" and "Enable API and UI tracking" options.

Click "Save".