More Info:
Enable kubelet client certificate rotation.Risk Level
LowAddress
SecurityCompliance Standards
- CIS Kubernetes
Triage and Remediation
- Remediation
Remediation
Using Console
Using Console
Run the following command on each node: ps -ef | grep kubelet Verify that the —rotate-certificates argument is not present, or is set to true. If the —rotate-certificates argument is not present, verify that if there is a Kubeletconfig file specified by —config, that file does not contain rotateCertificates: false.