STIGQter: STIG Summary: Mirantis Kubernetes Engine Security Technical Implementation Guide Version: 2 Release: 1 Benchmark Date: 24 Jul 2024:

The "Create repository on push" option in MSR must be disabled.

DISA Rule

SV-260928r966141_rule

Vulnerability Number

V-260928

Group Title

SRG-APP-000141-CTR-000320

Rule Version

CNTR-MK-000620

Severity

CAT II

CCI(s)

• CCI-000381 - Configure the system to provide only organization-defined mission essential capabilities.

Weight

10

Fix Recommendation

If MSR is not being utilized, this is Not Applicable.

Verify the "Create repository on push" option is disabled in MSR:

Log in to the MSR web UI as an administrator and navigate to System >> General Tab >>Repositories Section.

Set the "Create repository on push" slider to off.

Check Contents

If MSR is not being utilized, this is Not Applicable.

Verify the "Create repository on push" option is disabled in MSR:

Log in to the MSR web UI as an administrator and navigate to System >> General Tab >>Repositories Section.

Verify the "Create repository on push" slider is turned off. If it is turned on, this is a finding.

Vulnerability Number

V-260928

Documentable

False

Rule Version

CNTR-MK-000620

Severity Override Guidance

If MSR is not being utilized, this is Not Applicable.

Verify the "Create repository on push" option is disabled in MSR:

Log in to the MSR web UI as an administrator and navigate to System >> General Tab >>Repositories Section.

Verify the "Create repository on push" slider is turned off. If it is turned on, this is a finding.

Check Content Reference

M

Target Key

5595