The --secure-port argument is set to 0 misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_K8S_89
Category - Subcategory	Kubernetes - Native Security Controls
Provider	OTHER
Severity	LOW
Framework	Helm, Kubernetes, Kustomize

Impact

Do not disable the secure port. The secure port is used to serve https with authentication and authorization. If you disable it, no https traffic is served and all traffic is served unencrypted.

How to Fix

Kind: Pod [source,go]

{ "apiVersion: v1 kind: Pod metadata: creationTimestamp: null labels: component: kube-apiserver tier: control-plane name: kube-apiserver namespace: kube-system spec: containers:

• command:
• • kube-apiserver
• • --secure-port=80 image: gcr.io/google_containers/kube-apiserver-amd64:v1.6.0 ...", }

---