More Info:
Do not use automatically generated self-signed certificates for TLS connections between peers.Risk Level
LowAddress
SecurityCompliance Standards
- CIS Kubernetes
Triage and Remediation
- Remediation
Remediation
Using Console
Using Console
Run the following command on the etcd server node: ps -ef | grep etcd Verify that if the —peer-auto-tls argument exists, it is not set to true. Note: This recommendation is applicable only for etcd clusters. If you are using onlyone etcd server in your environment then this recommendation is not applicable.