Etcd should be configured with TLS encryption
Set up the kubernetes integration.
Cette page n'est pas encore disponible en français, sa traduction est en cours.
Si vous avez des questions ou des retours sur notre projet de traduction actuel,
n'hésitez pas à nous contacter.
Description
TLS encryption for the etcd service should be configured.
Rationale
Etcd is a highly-available key value store used by Kubernetes deployments for persistent storage of REST API objects. These objects are sensitive in nature and should be encrypted in transit.
Follow the etcd service documentation and configure TLS encryption. Then, edit the etcd pod specification file /etc/kubernetes/manifests/etcd.yaml
on the master node and set the following parameters:
--cert-file=</path/to/ca-file>
--key-file=</path/to/key-file>