Ensure that the --cert-file and --key-file arguments are set as appropriate

YüksekDüzey 1Manuel incelemeopenshift

Açıklama

Configure TLS encryption for the etcd service. The benchmark marks this recommendation Manual.

Nasıl denetlenir

Denetim yöntemi: Manuel inceleme

Bu öneri otomatik olarak denetlenemez. --include-manual parametresini verdiğinizde tarama bunu bu talimatlarla birlikte listeler.

OpenShift uses X.509 certificates to provide secure communication to etcd. OpenShift generates these files and sets the arguments appropriately. OpenShift does not use the etcd-certfile or etcd-keyfile flags. Keys and certificates for control plane components like kube-apiserver, kube-controller-manager, kube-scheduler and etcd are stored with their respective static pod configurations in the directory /etc/kubernetes/static-pod-resources/*/secrets.

Nasıl düzeltilir

Düzeltme yöntemi: Kılavuz veya altyapı yaması

OpenShift does not use the etcd-certfile or etcd-keyfile flags. Certificates for etcd are managed by the etcd cluster operator.

Özellikler

İşletim sistemleri: Herhangi biri
Etiketler: openshiftetcd
Referans: CIS Red Hat OpenShift Container Platform Benchmark v2.0.0 - 2.1 Ensure that the --cert-file and --key-file arguments are set as appropriate