Skip to content

OctoLintInsecureK8sTargets

Matthew Casperson edited this page Feb 18, 2024 · 1 revision

OctoLintInsecureK8sTargets returns a warning about Kubernetes targets that call insecure (or HTTP) URLs or ignore certificate validation.

Recommendation

Requests to HTTP URLs are insecure and may expose information to third parties.

Remediation

Ensure all Kubernetes targets use secure HTTPS URLs and do not skip TLS validation.

Clone this wiki locally