etcd is a highly-available key value store used by Kubernetes deployments for persistent storage of all of its REST API objects. These objects are sensitive in nature and should not be available to unauthenticated clients, using the --auto-tls option, allows clients to use a self-signed certificate. Orca has detected that etcd is configured to accept self-signed client certificates.
Recommended Mitigation
It is recommended to edit the etcd pod specification file to remove the ""--auto-tls=true"" parameter.
Best practices
