The NSA and CISA just released a Kubernetes Hardening guide. I have attached it here.
cheers
Kubernetes Hardening Guide
Userlevel 7
+22
Userlevel 7
+22
I seem to have posted this as a question and not content but don't see where I can change that :).
Userlevel 7
+20
Saved for future reading when I can get in to Kubernetes. 
Userlevel 7
+20
I also strongly recommend looking into Ian Coldwater for insights around Kubernetes security hardening, they’re extremely well known and respected within the community (Ian is the Kubernetes SIG Co-Chair) and the infosec community was widely surprised that Ian wasn’t consulted in the production of that document you referenced
Userlevel 7
+22
I also strongly recommend looking into Ian Coldwater for insights around Kubernetes security hardening, they’re extremely well known and respected within the community (Ian is the Kubernetes SIG Co-Chair) and the infosec community was widely surprised that Ian wasn’t consulted in the production of that document you referenced
Interesting. let me check if he worked on the CKS or not, if not this could be some personality conflict thing :)
Comment
Enter your username or e-mail address. We'll send you an e-mail with instructions to reset your password.