HIGH
Source
CloudSploit
ID
client-certificate-disabled

Client Certificate Disabled

Ensure client certificate authentication to Kubernetes clusters is disabled.

In authentication using client certificates, the client presents a certificate signed by cluster root certificate authority which is only base64 encoded and not encrypted. The client certificate authentication method is considered legacy and cause potential security risks. It is recommended to use the default GKE OAuth method for authentication.

Ensure no kubernetes clusters are using client certificates for authentication