Best practices

Kubernetes Controller Manager –root-ca-file argument is not set as appropriate

Risk Level

Informational (4)

Platform(s)

  • N/A

Compliance Frameworks

Description

It was found that the argument --root-ca-file in the Controller Manager configuration file is not set as appropriate. This argument contains the path to the certificate file used for API server connection needed for relevant proccesses. Connection established without verifying the certificate could be subject to Man In the Middle attacks.

  • Recommended Mitigation

    It is recommended to edit the Controller Manager configuration file on the master node and set the path to the certificate bundle file as a parameter to the --root-ca-file argument.

Need help?

Get a free Security Risk Assessment. Start today

See Orca in action See Orca in action-> View a 10 minute recorded demo or sign up for a personalized one-on-one walk-through.