mirror of
https://github.com/nubenetes/awesome-kubernetes.git
synced 2026-07-12 18:00:37 +00:00
3.4 KiB
3.4 KiB
description
| description |
|---|
| Curated, AI-ranked Securityascode resources for the 2026 Cloud Native architect: top-tier tools, guides and references (Hardened Infrastructure). |
Security Policy as Code
!!! tip "Nubenetes V2 Elite Portal" You are browsing the AI-Curated V2 Elite Edition. Looking for the exhaustive list of references? Check out the V1 Historical Archive.
!!! info "Architectural Context" Detailed reference for Security Policy as Code in the context of Hardened Infrastructure.
Security
IAM
Protocols
- (2022) curity.io: OAuth 2.0 Overview [COMMUNITY-TOOL] — An industrial-grade review of the OAuth 2.0 protocol specifications, flows, and grant types. Provides system architects with core design criteria to safely establish authorization states between microservice deployments. Underlines secure handling of access, refresh, and id tokens.
- (2022) curity.io: OpenID Connect Overview [COMMUNITY-TOOL] — Provides a comprehensive architecture overview of OpenID Connect (OIDC) acting as the authentication layer on top of OAuth 2.0. Analyzes ID token syntax, discovery endpoints, and flows for multi-tenant systems. Essential background knowledge for implementing cloud-native federated identities.
Identity and Access
Spring Security
- (2022) freecodecamp.org: How to Implement an OAuth2 Resource Server with Spring Security [JAVA CONTENT] [COMMUNITY-TOOL] — A hands-on implementation tutorial detailing the deployment of an OAuth2-compliant resource server using Spring Security. It guides through configuring middleware to parse and authenticate incoming JWT requests.
Policy Enforcement
Admission Control
- (2022) MagTape ⭐ 152 [JAVASCRIPT CONTENT] 🌟🌟 [LEGACY] — An admission controller developed by T-Mobile that evaluates resources against organizational policy constraints during creation. Written in Node.js, it offered a lightweight alternative to OPA for specific JSON schema validations. By 2026, it has been largely archived, with developers migrating to Gatekeeper or Kyverno.
💡 Explore Related: Ansible | Devsecops | Terraform
🔗 See Also: Postman | Cloudflare