Ensure that the --tls-cert-file and --tls-private-key-file arguments are set as appropriate

YüksekDüzey 1Manuel incelemeopenshift

Açıklama

Setup TLS connection on the Kubelets. The benchmark marks this recommendation Manual.

Nasıl denetlenir

Denetim yöntemi: Manuel inceleme

Bu öneri otomatik olarak denetlenemez. --include-manual parametresini verdiğinizde tarama bunu bu talimatlarla birlikte listeler.

By default, OpenShift uses X.509 certificates to provide secure connections between the API server and node/kubelet. OpenShift Container Platform monitors certificates for proper validity, for the cluster certificates it issues and manages. The OpenShift Container Platform manages certificate rotation and the alerting framework has rules to help identify when a certificate issue is about to occur.

Nasıl düzeltilir

Düzeltme yöntemi: Kılavuz veya altyapı yaması

OpenShift automatically manages TLS authentication for the API server communication with the node/kublet. This is not configurable.

Özellikler

İşletim sistemleri: Herhangi biri
Etiketler: openshiftworker-nodenetwork
Referans: CIS Red Hat OpenShift Container Platform Benchmark v2.0.0 - 4.2.9 Ensure that the --tls-cert-file and --tls-private-key-file arguments are set as appropriate