Fix Authenticity Check of SSL/TLS Connection is Skipped

Severity: Moderate

There are several occurrences where the authenticity of a TLS connection is not verified. For example:

./pkg/controllers/etcd.go
./pkg/controllers/kube-controller-manager.go
./pkg/controllers/kube-scheduler.go
./pkg/node/kubelet.go

In ./pkg/util/net.go, a dedicated function RetryInsecureHttpsGet() is defined, which uses InsecureSkipVerify.

It's recommended not to use InsecureSkipVerify. Be careful of potential Man-in-the-Middle attacks.
 

1.
2.
3.