Ensure that encryption providers are appropriately configured

YüksekDüzey 1Manuel incelemeopenshift

Açıklama

Where etcd encryption is used, appropriate providers should be configured. The benchmark marks this recommendation Manual.

Nasıl denetlenir

Denetim yöntemi: Manuel inceleme

Bu öneri otomatik olarak denetlenemez. --include-manual parametresini verdiğinizde tarama bunu bu talimatlarla birlikte listeler.

OpenShift supports encryption of data at rest of etcd datastore, but it is up to the customer to configure. The asecbc cipher had been the only supported cipher up to OCP 4.13. Starting with OCP 4.13, the aescgm cipher can be used as well. No other ciphers are supported. Keys are stored on the filesystem of the master and automatically rotated.

Nasıl düzeltilir

Düzeltme yöntemi: Kılavuz veya altyapı yaması

Follow the OpenShift documentation for encrypting etcd data.

Özellikler

İşletim sistemleri: Herhangi biri
Etiketler: openshiftapi-serversecrets
Referans: CIS Red Hat OpenShift Container Platform Benchmark v2.0.0 - 1.2.29 Ensure that encryption providers are appropriately configured