Description

etcd is a highly-available key value store used by Kubernetes deployments for persistent storage of all of its REST API objects. These objects are sensitive in nature and should be encrypted in transit and also amongst peers in the etcd clusters. Orca has detected that etcd is not configured to use TLS encryption for peer communication.

• 

  Recommended Mitigation

  It is recommended to edit the etcd pod specification file to add the ""--peer-client-cert-auth=true"" parameter. This recommendation is applicable only for etcd clusters. If you are using only one etcd server in your environment then this recommendation is not applicable.