kubernetes kubernetes/cka

API security and RBAC
TLS
TLS Certificates in K8s
Image Security & Security Context
Network Policies
Service Accounts
Security


Core Idea

Kubernetes security stacks six primitives in layers: secure the hosts, secure the cluster, then require authentication, authorization, TLS certificates, and network policies.

  • The six security primitives: secure hosts, secure Kubernetes, authentication, authorization, TLS certificates, network policies.
  • Each one links out to its own deep dive: API security and RBAC, TLS and TLS certificates in K8s, image security and security context, network policies, service accounts.

Security Primitives

  1. Secure Hosts
  2. Secure Kubernetes
  3. Authentication
  4. Authorization
  5. TLS Certificate
  6. Network Policies