Kubernetes API server security

[lzianekhodja-aneo]

SSL/TLS: Known Untrusted / Dangerous Certificate Authority (CA) Detection on 6443/tcp and 8443/tcp

[lzianekhodja-aneo]

Response:

Activate TLSv1.3 and cipher suite EECDH+AESGCM:EECDH+AES256 on Kubernetes

AWS EKS is a managed kubernetes offering. Kubernetes control plane components such as API Server, ETCD are installed, managed and upgraded by AWS. Hence you can neither see these components nor can exec into these components.

In EKS, the kube-controller-manager is managed by AWS (along with the other components) and you cannot modify its parameters. So, in AWS EKS you can only play with the worker nodes.