1.2.7 Ensure that the --authorization-mode argument includes Node

[scfast]

Profile Applicability:
• Level 1 - Master Node

Description:
Restrict kubelet nodes to reading only objects associated with them.

Rationale:
The Node authorization mode only allows kubelets to read Secret, ConfigMap,
PersistentVolume, and PersistentVolumeClaim objects associated with their nodes.

Impact:
None

Audit:
Run the following command on the Control Plane node:
ps -ef | grep kube-apiserver
Verify that the --authorization-mode argument exists and is set to a value to include
Node.

Default Value:
By default, Node authorization is not enabled.

References:

1. https://kubernetes.io/docs/admin/kube-apiserver/
2. https://kubernetes.io/docs/admin/authorization/node/
3. Node authorizer kubernetes/kubernetes#46076
4. https://acotten.com/post/kube17-security