Ensure that the --kubelet-https argument is set to true

MEDIUM

Description

Description:

Use https for kubelet connections.

Rationale:

Connections from apiserver to kubelets could potentially carry sensitive data such as secrets and keys. It is thus important to use in-transit encryption for any communication between the apiserver and kubelets.

You require TLS to be configured on apiserver as well as kubelets.

Remediation

Edit the API server pod specification file '/etc/kubernetes/manifests/kube-apiserver.yaml' on the master node and remove the '--kubelet-https' parameter.

Policy Details

Rule Reference ID: AC_K8S_0092
Remediation Available: No
Resource: kubernetes_pod
Resource Category: Compute
Resource Type: Pod

Frameworks