Red Hat OpenShift
TMA-OPENSHIFT-1.2.29
Ensure that encryption providers are appropriately configured
ВисокаНиво 1Ручни прегледopenshift
Опис
Where etcd encryption is used, appropriate providers should be configured. The benchmark marks this recommendation Manual.
Како се проверава
Метод провере: Ручни преглед
Ова препорука се не може проверити аутоматски. Скенирање је наводи са овим упутствима када проследите --include-manual.
OpenShift supports encryption of data at rest of etcd datastore, but it is up to the customer to configure. The asecbc cipher had been the only supported cipher up to OCP 4.13. Starting with OCP 4.13, the aescgm cipher can be used as well. No other ciphers are supported. Keys are stored on the filesystem of the master and automatically rotated.
Како се исправља
Метод исправке: Смерница или закрпа инфраструктуре
Follow the OpenShift documentation for encrypting etcd data.
Својства
- Оперативни системи
- Било који
- Ознаке
- openshiftapi-serversecrets
- Референца
- CIS Red Hat OpenShift Container Platform Benchmark v2.0.0 - 1.2.29 Ensure that encryption providers are appropriately configured