Description

A client certificate is a base64-encoded public certificate used by clients to authenticate to the cluster endpoint. Client certificates can authenticate and perform any action on the API server in some scenarios. Orca has detected that {GcpGkeCluster} uses certificate based authentication.

• 

  Recommended Mitigation

  Consider not using certificate based authentication. For further information, visit: <a href="https://cloud.google.com/kubernetes-engine/docs/how-to/api-server-authentication#disabling_authentication_with_a_client_certificate" target="_blank" rel="noopener noreferrer">https://cloud.google.com/kubernetes-engine/docs/how-to/api-server-authentication#disabling_authentication_with_a_client_certificate</a>