Kubernetes security best practices in short -
A Thread π
A Thread π
1. Keep the Kubernetes cluster up to date.
2. Ensure That Only Authorized Images are Used in Your Environment
3. Limit Direct Access to Kubernetes Nodes
4. Create Administrative Boundaries between Resources
2. Ensure That Only Authorized Images are Used in Your Environment
3. Limit Direct Access to Kubernetes Nodes
4. Create Administrative Boundaries between Resources
5. Keep Secrets Secret!
6. Define Resource Quota
7. Implement Network Segmentation
8. Apply Security Context to Your Pods and Containers
9. Restrict API access.
10. Restrict SSH access.
6. Define Resource Quota
7. Implement Network Segmentation
8. Apply Security Context to Your Pods and Containers
9. Restrict API access.
10. Restrict SSH access.
11. Use Namespaces smartly
12. Enable Role-Based Access Control (RBAC)
13. Separate sensitive workloads
14. Harden node security
15. Run a cluster-wide Pod Security Policy
16. Use network policies to restrict access
17. Never be a root
18. Have regular security audits
12. Enable Role-Based Access Control (RBAC)
13. Separate sensitive workloads
14. Harden node security
15. Run a cluster-wide Pod Security Policy
16. Use network policies to restrict access
17. Never be a root
18. Have regular security audits
19. Log Everything
20. Tighten IAM policies (when running over cloud)
21. Ensure That Only Authorized Images are Used in Your Environment
22. Control network access to sensitive ports
20. Tighten IAM policies (when running over cloud)
21. Ensure That Only Authorized Images are Used in Your Environment
22. Control network access to sensitive ports
Please add more to the list.
β’ β’ β’
Missing some Tweet in this thread? You can try to
force a refresh
γ
