Consider external secret storage

MoyenneNiveau 2Revue manuelleopenshift

Description

Consider the use of an external secrets storage and management system, instead of using Kubernetes Secrets directly, if you have more complex secret management needs. Ensure the solution requires authentication to access secrets, has auditing of access to and use of secrets, and encrypts secrets. Some solutions also make it easier to rotate secrets. The benchmark marks this recommendation Manual.

Méthode de vérification

Méthode d'audit: Revue manuelle

Cette recommandation ne peut pas être vérifiée automatiquement. Une analyse la liste avec ces instructions lorsque vous passez --include-manual.

OpenShift supports a broad ecosystem of security partners many of whom provide integration with enterprise secret vaults. Review your secrets management implementation.

Méthode de correction

Méthode de correction: Recommandation ou correctif d'infrastructure

Refer to the secrets management options offered by your cloud provider or a third-party secrets management solution.

Propriétés

Systèmes d'exploitation: Tous
Étiquettes: openshiftpoliciessecrets
Référence: CIS Red Hat OpenShift Container Platform Benchmark v2.0.0 - 5.4.2 Consider external secret storage