5 ms·

Which of these issues strikes you as being a meaningful risk to a realistic deployment of Kubernetes?

• geggam 7y ago
  The better question is when you deploy k8s in a production how do you ensure none of the risks are being exploited. Given todays landscape of hardware and software exploits adding a complex orchestration layer with identified issues seems like less than prudent behavior. I currently work on kubernetes in production and am migrating large clients into these systems. I see the distinct lack of knowledge around securing systems and more so when adding kubernetes.
  • persistent 7y ago
    I'm not running antagonistic workloads in k8s though, I'm just running my own junk, each component of which also has its own laundry list of security nightmares.
  • raesene9 7y ago
    As with anything in security, this will depend on your threat model and the benefits of using k8s. There is some good information about securing k8s around, although we could always do with more. There's a free oReilly eBook on k8s security from aqua (https://info.aquasec.com/kubernetes-security https://info.aquasec.com/kubernetes-security) Also the CIS benchmark for k8s is reasonably up to date, although could use expanding, which should be happening for the next version. On top of that there have been quite a few conf. talks now about k8s security https://www.youtube.com/playlist?list=PLKDRii1YwXnLmd8ngltnf9Kzvbja3DJWx https://www.youtube.com/playlist?list=PLKDRii1YwXnLmd8ngltnf... for some examples
  • deleted 7y ago
    [deleted]