API Server Should Set Encryption Provider Config

Verifies that —encryption-provider-config is set so secrets are encrypted at rest in etcd rather than stored in plaintext.

High

Security

Using Console

Refer to the remediation guidance for this control. Detailed console, CLI and Python steps are being generated.

⌘I