Ensure Rotate Kubelet Server Certificate Argument Is Enabled

More Info:

Enable kubelet server certificate rotation on controller-manager.

Risk Level

Low

Address

Security

Compliance Standards

CIS Kubernetes

Triage and Remediation

Remediation

Remediation

Using Console

Run the following command on the Control Plane node: ps -ef | grep kube-controller-manager Verify that RotateKubeletServerCertificate argument exists and is set to true.

Additional Reading:

https://kubernetes.io/docs/admin/kubelet-tls-bootstrapping/#approval-controller

⌘I

​More Info:

​Risk Level

​Address

​Compliance Standards

​Triage and Remediation

​Remediation

​Additional Reading: