cis-gke-v170-3.2.9 - Ensure RotateKubeletServerCertificate is set to true
Enable kubelet server certificate rotation on GKE nodes.
Tags
Updated: 2026-09-16Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Audit Kubelet certificate rotation configuration
- Remediate Kubelet certificate rotation settings
- Restart Kubelet service
Inputs
- Kubelet configuration file
- Kubelet service file
Outputs
- Updated Kubelet configuration file
- Kubelet service status
Requirements
- SSH access to worker nodes
- kubectl access
- Sudo or root access