https://github.com/kabachook/k8s-security
Kubernetes security notes and best practices
https://github.com/kabachook/k8s-security
attacker best-practices checklist kubernetes kubernetes-cluster kubernetes-security security vulnerabilities
Last synced: about 2 months ago
JSON representation
Kubernetes security notes and best practices
- Host: GitHub
- URL: https://github.com/kabachook/k8s-security
- Owner: kabachook
- Created: 2019-07-16T06:03:06.000Z (almost 6 years ago)
- Default Branch: master
- Last Pushed: 2022-04-15T10:38:14.000Z (about 3 years ago)
- Last Synced: 2025-02-12T06:58:09.667Z (4 months ago)
- Topics: attacker, best-practices, checklist, kubernetes, kubernetes-cluster, kubernetes-security, security, vulnerabilities
- Language: Shell
- Homepage:
- Size: 5.31 MB
- Stars: 715
- Watchers: 30
- Forks: 73
- Open Issues: 2
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# Kubernetes security
This repo is a collection of kubernetes security stuff and research.
## Overview
- [Security notes](./NOTES.md)
In-depth research about security of kubernetes features and misconfigurations. Source for all documents below
- [Security hardening and best practices](./HARDENING.md)
A "must do"/best practices list of things to make attacker's life hard
- [Security flags checklist](./FLAGS.md)
A checklist of flags to quickly test if your cluster has security features enabled.
- [Attacker's guide](./ATTACKER.md)
A guide for attacker: what to do if he gets to pod/cluster.
Also, some attacks included
- [Vulnerabilities](./VULN.md)
Page with sources for security announces and previous vulnerabilities
## Tools
- [k8numerator](./k8numerate/README.md)
Script for enumerating services in kubernetes cluster. Common services dictionary provided.
## Slides
- [Midterm](https://docs.google.com/presentation/d/1_D1fyl_DO0SGn3lh2lsEGMplRc9TegX8pEhVF9hnX_0/edit?usp=sharing)
- [Final](https://docs.google.com/presentation/d/18A3dL0GvE6MJOvJtKdZBf-8Gd0E6fJov5BTrnxvKHtQ/edit?usp=sharing)
## References
- [Kubernetes security audit](https://github.com/kubernetes/community/tree/master/wg-security-audit/findings)
[Tracking issue](https://github.com/kubernetes/kubernetes/issues/81146)
- [Attacking Kubernetes](https://github.com/kubernetes/community/blob/master/wg-security-audit/findings/AtredisPartners_Attacking_Kubernetes-v1.0.pdf)