Kubernetes security

• https://kubernetes.io/docs/concepts/security/

• Container security: RUN
• readOnlyRootFilesystem

Pod :

• runAsUser
• allowPrivilegeScalation

• Kubernetes Pod Security Admission (PSA)
• Kubernetes Pod Security Standards (PSS)

• kubernetes.io/enforce-mountable-secrets

• Kubernetes Authentication

• EKS security
• GKE security

Activities

• Read Good practices for Kubernetes Secrets
• Pull an Image from a Private Registry in Kubernetes
• https://youtu.be/oBf5lrmquYI
• Configure a Security Context for a Pod or Container

Related

• Certified Kubernetes Security Specialist (CKS)
• SecurityContext
• Trivy
• Kyverno
• KubeBench

See also

• Kubernetes security, OPA, EKS security, PSA, PSS, CKS, SecurityContext, containerSecurityContext, Trivy, KubeBench, Kubernetes Admission Controllers admissionregistration.k8s.io, Hardeneks, Gatekeeper (Kubernetes), kubernetes.io/enforce-mountable-secrets, Auditing, security context, readOnlyRootFilesystem, allowPrivilegeEscalation, kube-bench