Skip to main content

More Info:

Do not use self-signed certificates for TLS.

Risk Level

High

Address

Security

Compliance Standards

  • CIS Kubernetes

Triage and Remediation

Remediation

Using Console

Run the following command on the etcd server node: ps -ef | grep etcd Verify that if the —auto-tls argument exists, it is not set to true.

Additional Reading: