More Info:
Enable Kubelet authentication using certificates.Risk Level
LowAddress
SecurityCompliance Standards
- CIS Kubernetes
Triage and Remediation
- Remediation
Remediation
Using Console
Using Console
Run the following command on each node: ps -ef | grep kubelet Verify that the —client-ca-file argument exists and is set to the location of the client certificate authority file. If the —client-ca-file argument is not present, check that there is a Kubelet config file specified by —config, and that the file sets authentication: x509: clientCAFile to the location of the client certificate authority file.