Kubernetes Controller Manager –profiling argument is not set to false
It was found that the argument --profiling in the Controller Manager configuration file is not set to False. Profiling is...
Blog
Kubernetes Controller Manager terminated pod garbage collector argument is not set appropriately
It was found that the argument --terminated-pod-gc-threshold in the Controller Manager configuration file is not set appropriately. This argument indicates...
Kubernetes scheduler –bind-address is not set to localhost
It was found that the argument --bind-address in the Scheduler pod specification file is not set to the IP address...
K8s etcd using plaintext communication
etcd is a highly-available key value store used by Kubernetes deployments for persistent storage of all of its REST API...
Kubernetes Controller Manager RotateKubeletServerCertificate argument is not set to true
It was found that the argument RotateKubeletServerCertificate under --feature-gate in the Controller Manager configuration file is not set to true....
Kubernetes Controller Manager –bind-address is not set to localhost
It was found that the argument --bind-address in the Controller Manager configuration file is not set to the IP address...
K8s etcd is not using client certificate access
etcd is a highly-available key value store used by Kubernetes deployments for persistent storage of all of its REST API...
K8s etcd is using –peer-auto-tls argument
etcd is a highly-available key value store used by Kubernetes deployments for persistent storage of all of its REST API...
VM disk without Customer-Supplied Encryption Key
Customer-Supplied Encryption Keys (CSEK) are a feature in Google Cloud Storage and Google Compute Engine. If you supply your own...