DevOps & Infrastructure

Performing Kubernetes Etcd Security Assessment

Assesses the security posture of the etcd cluster backing Kubernetes: encryption at rest, TLS peer and client transport, access control, backup encryption, and network isolation. Use when auditing or hardening a control plane, reviewing whether Secrets are encrypted at rest, or protecting etcd backups, since etcd stores Secrets, RBAC policy, and ConfigMaps in plaintext by default. Keywords: etcd, EncryptionConfiguration, encryption at rest, peer TLS, snapshot, backup, control plane. Do not use for broad cluster-wide CIS checks - use performing-kubernetes-cis-benchmark-with-kube-bench.

Publisher / source
Cybersecurity Skills (Community)
Upstream record
mukul975/Anthropic-Cybersecurity-Skills
Version
Version 5
Published
Publication review
Approved for publication
Content fingerprint
4523f85f88f460e551d479991b79e367366a907d3ba3a2d5ab64efab7e8fcd51