Ensure that the --client-cert-auth argument is set to true

높음레벨 1수동 검토openshift

설명

Enable client authentication on etcd service. The benchmark marks this recommendation Manual.

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

OpenShift uses X.509 certificates to provide secure communication to etcd. OpenShift installation generates these files and sets the arguments appropriately. The following certificates are generated and used by etcd and other processes that communicate with etcd: • Client certificates: Client certificates are currently used by the API server only, and no other service should connect to etcd directly except for the proxy.

조치 방법

조치 방식: 가이드 또는 인프라 패치

This setting is managed by the cluster etcd operator. No remediation required.

속성

운영 체제: 모두
태그: openshiftetcd
참고 자료: CIS Red Hat OpenShift Container Platform Benchmark v2.0.0 - 2.2 Ensure that the --client-cert-auth argument is set to true