Bump RSA key size to 3072-bits to meet German federal BSI Technical Guideline TR-02102-2 #10077
Description
What steps did you take and what happened?
Use kubeadmcontrolplane
What did you expect to happen?
This would have been a feature request, but as of 2024/1/1 this is now a bug. Germany's BSI (Federal Office for Information Security) requires government systems to use at least 3000 bit RSA keys since 2024/1/1. This means that kubeadm cannot meet federal security standards as the 2048-bit RSA key length is hardcoded.
3000+ bit keys are considered good until 2030.
Recommend changing the default to 3072-bits. This should have no impact on existing clusters.
Cluster API version
main / v1.6.1
Kubernetes version
N/A
Anything else you would like to add?
No other deltas with the standard were found.
Label(s) to be applied
/kind bug
One or more /area label. See https://github.com/kubernetes-sigs/cluster-api/labels?q=area for the list of labels.
Metadata
Metadata
Assignees
Labels
Denotes an issue that needs help from a contributor. Must meet "help wanted" guidelines.Categorizes issue or PR as related to adding, removing, or otherwise changing an APICategorizes issue or PR as related to a bug.Important over the long term, but may not be staffed and/or may need multiple releases to complete.Indicates an issue or PR is ready to be actively worked on.