Skip to main content

More Info:

Encrypt etcd key-value store.

Risk Level

Low

Address

Security

Compliance Standards

  • CIS Kubernetes

Triage and Remediation

Remediation

Using Console

Run the following command on the Control Plane node: ps -ef | grep kube-apiserver Verify that the —encryption-provider-config argument is set to an EncryptionConfig file. Additionally, ensure that the EncryptionConfig file has all the desired resources covered especially any secrets.

Additional Reading: