Best practicesK8s etcd is using –peer-auto-tls argument
Platform(s)
Non-platform specific
Compliance Frameworks
- CCPA ,
- CPRA ,
- iso_27001_2022 ,
- iso_27002_2022 ,
- K8s CIS ,
- K8s OWASP Top 10 ,
- Mitre ATT&CK ,
- New Zealand Information Security Manual ,
- NIST 800-171 ,
- NIST 800-190 ,
- NIST 800-53 ,
- PDPA ,
- STIG K8s ,
- UK Cyber Essentials
Description
etcd is a highly-available key value store used by Kubernetes deployments for persistent storage of all of its REST API objects. These objects are sensitive in nature and should be accessible only by authenticated etcd peers in the etcd cluster. Hence, do not use self- signed certificates for authentication. Using the --peer-auto-tls option, allows peers to use a self-signed certificate. Orca has detected that etcd is configured to accept self-signed client certificates as authentication method for etcd cluster peers.
Demo the Orca Platform
In just 10 minutes, you’ll see how Orca Security can revolutionize your cloud security strategy. Watch a recorded demo from a cloud security expert now.