Ensure that the --secure-port argument is not set to 0

HIGH

Description

Description:

Do not disable the secure port.

Rationale:

The secure port is used to serve https with authentication and authorization. If you disable it, no https traffic is served and all traffic is served unencrypted.

You need to set the API Server up with the right TLS certificates.

Remediation

Edit the API server pod specification file '/etc/kubernetes/manifests/kube-apiserver.yaml' on the master node and either remove the '--secure-port' parameter or set it to a different (non-zero) desired port.

Policy Details

Rule Reference ID: AC_K8S_0109
Remediation Available: No
Resource Category: Management
Resource Type: Service

Frameworks