Kubernetes misconfigurations are common attack vectors.
Security Layers
- Cluster security
- Node security
- Pod security
- Container security
- Network securityCritical Controls
- Enable RBAC
- Pod Security Standards
- Network policies
- Secret encryption
- Admission controllersTools
- kube-bench (CIS benchmarks)
- Falco (runtime security)
- OPA Gatekeeper (policies)
- Trivy (vulnerability scanning)
- kubeaudit