mirror of
https://github.com/nubenetes/awesome-kubernetes.git
synced 2026-03-05 03:00:37 +00:00
4.7 KiB
4.7 KiB
Security and DevSecOps. Container Security
- Introduction
- Kubernetes Config Security Threats
- Multi-Level Security (MLS) vs Multi-Category Security (MCS). Make Secure Pipelines with Podman and Containers
- Project Calico
- keycloak
- Security Patterns for Microservice Architectures
- Anchore Container Security Solutions for DevSecOps
- GitHub security
- Databases in DMZ and Intranet
- Manage your secrets in Git with SOPS for Kubernetes
- Pentesting
- HashiCorp Vault
- Serverless Security Best Practices
Introduction
- fiercesw.com: DevOps vs DevSecOps
- devopszone.info: DevSecOps Explained
- linkedin: Dear Google, my data has left your building!
Kubernetes Config Security Threats
- cncf.io: Identifying Kubernetes Config Security Threats: Pods Running as Root
- mirantis.com: Introduction to Istio Ingress: The easy way to manage incoming Kubernetes app traffic Leaving your cluster exposed can be risky. That's why you need Istio Ingress, which only exposes the part that handles incoming traffic & allows routing rules based on routes, headers, IP addresses and more.
Multi-Level Security (MLS) vs Multi-Category Security (MCS). Make Secure Pipelines with Podman and Containers
- Why you should be using Multi-Category Security (MCS) for your Linux containers
- Using Podman and Containers to make a more secure pipeline
Project Calico
- Project Calico Secure networking for the cloud native era
keycloak
- keycloak.org Open Source Identity and Access Management For Modern Applications and Services
Security Patterns for Microservice Architectures
Anchore Container Security Solutions for DevSecOps
- Anchore Container image inspection and policy-based compliance
Secure Container Based CI/CD Workflows
Securing Kubernetes With Anchore
GitHub security
Databases in DMZ and Intranet
Manage your secrets in Git with SOPS for Kubernetes
Pentesting
HashiCorp Vault
- vaultproject.io Manage Secrets and Protect Sensitive Data. Secure, store and tightly control access to tokens, passwords, certificates, encryption keys for protecting secrets and other sensitive data using a UI, CLI, or HTTP API.
- medium: Coding for Secrets Reliability with HashiCorp Vault