STIGQter: STIG Summary: Mirantis Kubernetes Engine Security Technical Implementation Guide Version: 2 Release: 1 Benchmark Date: 24 Jul 2024:

MKE telemetry must be disabled.

DISA Rule

SV-260918r966111_rule

Vulnerability Number

V-260918

Group Title

SRG-APP-000141-CTR-000315

Rule Version

CNTR-MK-000500

Severity

CAT II

CCI(s)

• CCI-000381 - Configure the system to provide only organization-defined mission essential capabilities.

Weight

10

Fix Recommendation

Disable usage and API analytics tracking in MKE.

Log in to the MKE web UI and navigate to admin >> Admin Settings >> Usage.

Uncheck both the "Enable hourly usage reporting" and "Enable API and UI tracking" options.

Click "Save".

Check Contents

Verify that usage and API analytics tracking is disabled in MKE.

Log in to the MKE web UI and navigate to admin >> Admin Settings >> Usage.

Verify the "Enable hourly usage reporting" and "Enable API and UI tracking" options are both unchecked.

If either box is checked, this is a finding.

Vulnerability Number

V-260918

Documentable

False

Rule Version

CNTR-MK-000500

Severity Override Guidance

Verify that usage and API analytics tracking is disabled in MKE.

Log in to the MKE web UI and navigate to admin >> Admin Settings >> Usage.

Verify the "Enable hourly usage reporting" and "Enable API and UI tracking" options are both unchecked.

If either box is checked, this is a finding.

Check Content Reference

M

Target Key

5595