More Info:
Allow pods to verify the API servers serving certificate before establishing connections.Risk Level
LowAddress
SecurityCompliance Standards
- CIS Kubernetes
Triage and Remediation
- Remediation
Remediation
Using Console
Using Console
Run the following command on the Control Plane node: ps -ef | grep kube-controller-manager Verify that the —root-ca-file argument exists and is set to a certificate bundle filecontaining the root certificate for the API servers serving certificate.