More Info:
Where etcd encryption is used, appropriate providers should be configured.Risk Level
MediumAddress
SecurityCompliance Standards
- CIS Kubernetes
Triage and Remediation
- Remediation
Remediation
Using Console
Using Console
Run the following command on the Control Plane node:ps -ef | grep kube-apiserverGet the EncryptionConfig file set for —encryption-provider-config argument. Verifythat aescbc, kms or secretbox is set as the encryption provider for all the desiredresources.