https://github.com/kabachook/k8s-security

Kubernetes security notes and best practices
https://github.com/kabachook/k8s-security

attacker best-practices checklist kubernetes kubernetes-cluster kubernetes-security security vulnerabilities

Last synced: 11 days ago
JSON representation

Kubernetes security notes and best practices

• Host: GitHub
• URL: https://github.com/kabachook/k8s-security
• Owner: kabachook
• Created: 2019-07-16T06:03:06.000Z (over 5 years ago)
• Default Branch: master
• Last Pushed: 2022-04-15T10:38:14.000Z (over 2 years ago)
• Last Synced: 2024-08-01T09:24:35.415Z (3 months ago)
• Topics: attacker, best-practices, checklist, kubernetes, kubernetes-cluster, kubernetes-security, security, vulnerabilities
• Language: Shell
• Homepage:
• Size: 5.31 MB
• Stars: 710
• Watchers: 30
• Forks: 70
• Open Issues: 2
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

README

        
# Kubernetes security

This repo is a collection of kubernetes security stuff and research.

## Overview

- [Security notes](./NOTES.md)

  In-depth research about security of kubernetes features and misconfigurations. Source for all documents below

- [Security hardening and best practices](./HARDENING.md)

  A "must do"/best practices list of things to make attacker's life hard

- [Security flags checklist](./FLAGS.md)

  A checklist of flags to quickly test if your cluster has security features enabled.

- [Attacker's guide](./ATTACKER.md)

  A guide for attacker: what to do if he gets to pod/cluster.

  Also, some attacks included

- [Vulnerabilities](./VULN.md)

  Page with sources for security announces and previous vulnerabilities

## Tools

- [k8numerator](./k8numerate/README.md)

  Script for enumerating services in kubernetes cluster. Common services dictionary provided.

## Slides

- [Midterm](https://docs.google.com/presentation/d/1_D1fyl_DO0SGn3lh2lsEGMplRc9TegX8pEhVF9hnX_0/edit?usp=sharing)

- [Final](https://docs.google.com/presentation/d/18A3dL0GvE6MJOvJtKdZBf-8Gd0E6fJov5BTrnxvKHtQ/edit?usp=sharing)

## References

- [Kubernetes security audit](https://github.com/kubernetes/community/tree/master/wg-security-audit/findings)

  [Tracking issue](https://github.com/kubernetes/kubernetes/issues/81146)

- [Attacking Kubernetes](https://github.com/kubernetes/community/blob/master/wg-security-audit/findings/AtredisPartners_Attacking_Kubernetes-v1.0.pdf)