The --kubelet-https argument is not set to True misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_K8S_71
Category - Subcategory	Kubernetes - Native Security Controls
Provider	OTHER
Severity	HIGH
Framework	Helm, Kubernetes, Kustomize

Impact

Use https for kubelet connections. Connections from apiserver to kubelets could potentially carry sensitive data such as secrets and keys. It is thus important to use in-transit encryption for any communication between the apiserver and kubelets.

How to Fix

Kind Pod [source,go]

{ "apiVersion: v1 kind: Pod metadata: creationTimestamp: null labels: component: kube-apiserver tier: control-plane name: kube-apiserver namespace: kube-system spec: containers:

• command:
• • kube-apiserver
• • --kubelet-https=true image: gcr.io/google_containers/kube-apiserver-amd64:v1.6.0 ...", }

---