Security

Reverse Engineer Docker Images into Dockerfiles

TL;DR

Kubernetes Admission Controllers

Kubernetes supports over 30 Admission Controllers. Subsequent to Authorization and Authentication, Admission Controllers are the final step in a 3-step process before Kubernetes persists the resource in etcd (a consistent and highly-available key value store used as…

Kubernetes Authorization and RBAC

Authorization Modes

Kubernetes supports the following authorization modes:

• Attribute-Based Access Control: An authorizer through which access rights are granted to users through policies combining…

Kubernetes Authentication

There are 3 steps that Kubernetes uses to enforce security access and permissions — Authentication, Authorization and Admission. In this article we are going to consider Authentication first.

Trapping Hackers with Containerized Deception

TL;DR

This article explores modern honeypots that leverage containerization by walking through the design of a high-interaction honeypot that can use arbitrary Docker containers to lure malicious attacks.

Deploying Secure Firecracker MicroVMs on K8s using Weave FireKube

Introduction

Hardening Docker Container Using Seccomp Security Profile

Secure Computing Mode, also known as Seccomp, is a Linux kernel feature that improves several security features to help run Docker in a more secure environment.

Trusted Repositories and Container Registries in Kubernetes

In this topic, we will consider some of the key capabilities of trusted repositories and container registries. We will cover secure authentication, scanning and signing of content as necessary practices that ensure a secure…

Part1: Kubernetes AWS Resource Access: kube2Iam

Introduction

One of the major benefits of using containers for application, and Kubernetes for their orchestration, is that you can get the most out of the underlying virtual machines.
This however, gives rise to…