More Info:
Use a different certificate authority for etcd from the one used for Kubernetes.Risk Level
LowAddress
SecurityCompliance Standards
- CIS Kubernetes
Triage and Remediation
- Remediation
Remediation
Using Console
Using Console
Review the CA used by the etcd environment and ensure that it does not match the CA certificate file used for the management of the overall Kubernetes cluster. Run the following command on the master node: ps -ef | grep etcd Note the file referenced by the —trusted-ca-file argument. Run the following command on the master node: ps -ef | grep apiserver Verify that the file referenced by the —client-ca-file for apiserver is different from the —trusted-ca-file used by etcd.