Best practices

K8s etcd is not using client certificate access

Risk Level

Informational (4)

Platform(s)
  • N/A

Compliance Frameworks

Description

etcd is a highly-available key value store used by Kubernetes deployments for persistent storage of all of its REST API objects. These objects are sensitive in nature and should not be available to unauthenticated clients. You should enable the client authentication via valid certificates to secure the access to the etcd service, Orca has detected that etcd is not configured to accept valid client certificates to allow access.
  • Recommended Mitigation

    It is recommended to edit the etcd pod specification file to include the ""--client-cert-auth"" parameter.