Ensure the --peer-client-cert-auth argument is set to True
Error: The --peer-client-cert-auth argument is not set to True
Bridgecrew Policy ID: BC_K8S_93
Checkov Check ID: CKV_K8S_121
Severity: HIGH
The --peer-client-cert-auth argument is not set to True
Description
etcd should be configured for peer authentication. etcd is a highly-available key value store used by Kubernetes deployments for persistent storage of all of its REST API objects. These objects are sensitive in nature and should be accessible only by authenticated etcd peers in the etcd cluster.
Fix - Buildtime
Kubernetes
- Kind: Pod
apiVersion: v1
kind: Pod
metadata:
name: etcd
namespace: should-pass
spec:
hostNetwork: true
containers:
- name: "kuku2"
image: "b.gcr.io/kuar/etcd:2.2.0"
args:
...
+ - "--peer-client-cert-auth=true"
...
Updated 10 months ago