search

k3s-io / docs

k3s Documentation
http://docs.k3s.io
16 stars 126 forks source link

[k3s/v1.29] - Cannot find etcd config as stated in hardening guide #300

Closed cwrx777 closed 1 month ago

cwrx777 commented 1 month ago

release: 1.29.4 I am unable to find etcd config as stated here

brandond commented 1 month ago

Are you sure you're using etcd at all? By default, k3s uses sqlite. If you're not using etcd, then the etcd-specific bits of the hardening guide are not relevant.

dereknola commented 1 month ago

Correct, the CIS scans are only considered valid if you are running K3s with embedded etcd aka --cluster-init. Upstream and CIS don't have a concept of a non-etcd K8s cluster when it comes to security hardening.

cwrx777 commented 1 month ago

The etcd config is created after using --cluster-init