Best practices

Kubernetes Controller Manager –root-ca-file argument is not set as appropriate

Platform(s)

  • N/A

Compliance Frameworks

Description

It was found that the argument --root-ca-file in the Controller Manager configuration file is not set as appropriate. This argument contains the path to the certificate file used for API server connection needed for relevant proccesses. Connection established without verifying the certificate could be subject to Man In the Middle attacks.
Need help?

Get a free Security Risk Assessment. Start today

Orca Security Demo Demo the Orca Platform-> In just 10 minutes, you’ll see how Orca Security can revolutionize your cloud security strategy. Watch a recorded demo from a cloud security expert now.