{{ page.vid }} - {{ page.title }}

Issue description

Etcd (Kubernetes' Database) is accessible without authentication. This exposes the entire state of your Kubernetes cluster to the reader.

Remediation

Ensure your etcd is accepting connections only from the Kubernetes API, using the --trusted-ca-file etcd flag. This is usually done by the installer, or cloud platform.

References

etcd - Transport security model
Operating etcd clusters for Kubernetes - Securing etcd clusters

737 B Raw Blame History

{{ page.vid }} - {{ page.title }}

Issue description

Remediation

References

737 B

Raw Blame History